Security
Built to keep your content and connections safe.
Security questions, disclosure reports, or compliance requests — contact us.
Practices
Encrypted connection tokens
Tokens for accounts you connect (publishing, calendar) are stored encrypted, never in plain text.
Workspace isolation
Every query is scoped to your workspace. Your sources, drafts, and analytics are never visible to other accounts.
Guarded outbound fetches
Source and media fetches run through SSRF-guarded fetchers, so the app only reaches the destinations it should.
Least-privilege integrations
Integrations request only the scopes they need, and you can disconnect them at any time from Calendar → Connections.