Tenant isolation
Data access is limited by the organization and member permissions.
OpsSecureHub
Platform security
Explore our access, integrity and collection controls. Hosting and processing arrangements are specified before you commit.
05 / PLATFORM SECURITY
Trust is demonstrated, not declared.
Tenant isolation, invitation-only access, multi-factor authentication and a chained audit log. Collection minimization: no prompt text or file content is transmitted — only types, counts, names and metadata. Concrete controls, not a promise of protection against every attack.
Invitation-only access
An approved address is required. Roles govern sensitive actions.
Multi-factor authentication
TOTP enrollment is available; administration is protected by a second factor.
Chained audit log
SHA-256 fingerprints and an append-only journal preserve traceability.
Data in Canada
Residency, AI processing and included services are documented before your environment is activated.
No secret values
The agent reports secret names and presence, not values. Never send secrets in an import or enquiry.
Dual approval and continuity
Sensitive actions require approval. Dual approval, alternates and delegations support continuity under account permissions and rules.
Every action is audited
Requests, approvals, cancellations and results record the actor and date in the audit log.
Credentials never redisplayed
Ticketing credentials are stored in an encrypted vault. The console shows when they were recorded, never the secrets.
Minimized emails and unsubscribe
Emails contain only necessary minimized facts; details remain in the console. External addresses give express consent and can unsubscribe, including from critical alerts. Mandatory internal notices remain governed by your rules.
OpsSecureHub
Your next security decision starts with a clear view.
Let’s discuss your AI use, your tools and your CCSPA readiness.