Security

Customer data is scoped to an organization. A member of one organization cannot read another organization’s services, domains, invoices, or files. Platform staff use separate roles, and those actions are audited.

Passwords are stored by Better Auth using its password hash. Payment cards are collected by Stripe Checkout and are never stored here. Webhooks are accepted only after signature verification, and each event id is processed once.

DNS changes, domain authorization codes, backup restores, suspensions, and cancellations require an explicit confirmation. Integration credentials are encrypted before they are written down. Logs pass through a redaction step for secrets.

Two-factor authentication and recovery codes are available on the account security page. Sessions can be revoked per device. Account export and account deletion are available to the signed-in user.