Security
Last updated: May 2, 2026
1. Overview
This page lists the controls that protect the platform and your data.
2. Data in transit
The platform encrypts all traffic with TLS 1.2 or higher: metric ingestion, query endpoints, and the management portal.
3. Data at rest
We encrypt stored metrics and account data at rest.
4. Authentication
- API access requires bearer token authentication.
- Tokens are scoped per tenant and can be revoked at any time via the portal.
- See the Authentication page for setup details.
5. Tenant isolation
We isolate customer data by tenant. Access controls stop one tenant from reading another tenant's data.
6. Infrastructure security
- The platform runs on hardened cloud infrastructure with network-level access controls.
- We apply regular security patches and updates to all system components.
7. Vulnerability disclosure
If you discover a security vulnerability, please report it responsibly by emailing: [email protected]
Please do not publicly disclose the vulnerability until we have had an opportunity to address it.
8. Compliance
We follow industry security best practices. For compliance questions, contact us directly.
9. Contact
For security inquiries, contact: [email protected]