How we back it up
Alignment isn't a slide. These are the mechanisms running in production and in our build pipeline today.
300+ row-level security policies across 200+ tables gate rows at PostgreSQL itself — not just in application code — so an app-layer bug is far less likely to cross tenants, because the database enforces isolation independently of the application.
Type-checking, 7,500+ automated tests (as of July 2026), linting, and a production build must pass before code ships. A dedicated test asserts that no data-changing route is reachable without authentication.
Static analysis (OWASP Top Ten), secret scanning, dependency vulnerability audits, and a software bill of materials run automatically — and re-run weekly against newly disclosed vulnerabilities.
Cryptographic operations are centralized in one internal module that uses only FIPS-approved algorithms, with an automated guardrail that blocks weak algorithms from entering the codebase.
Security-relevant actions are recorded through a privileged server-side path that ordinary user sessions cannot write to directly, designed to be tamper-evident and retained on a defined schedule.
A self-run OWASP ZAP scan returned zero critical or high findings. A scoped penetration test by an independent firm is on our roadmap. This complements our internal security-audit cycles.
Questions, or need our control mappings?
We maintain detailed control-to-evidence mappings (NIST 800-53/171, CSF 2.0, ASVS, SSDF) for security reviews. Security researchers can report issues through our responsible disclosure policy.