Security
Last updated: June 14, 2026
Encryption
All traffic is TLS 1.2+. Data at rest is encrypted by our managed backend (AES-256).
Multi-tenant isolation
Every Customer workspace is isolated by row-level security in the database. Server functions validate the requesting tenant on every call. API keys are stored as SHA-256 hashes — we never store plaintext keys.
Access control
- Workspace owners and members are gated by role; the public dashboard sits behind authentication.
- Internal admin tools are role-scoped and audit-logged.
- Least-privilege service role keys are used only inside trusted server functions.
Abuse prevention
Per-tenant and per-IP rate limits, payload validation, and plan-based quotas guard against runaway costs and scraping.
AI safety
Customer knowledge is used only to answer visitors of that Customer. We do not use your content to train third-party foundation models.
Responsible disclosure
Found a vulnerability? Email security@buyermode.ai. We aim to acknowledge reports within 2 business days. See also /.well-known/security.txt.
Roadmap
- SOC 2 Type II — in progress.
- ISO 27001 — planned.
- Customer-managed retention windows — planned.