Security

All traffic is served over HTTPS (TLS) in transit, and data is encrypted at rest by our infrastructure provider. Secrets and API keys are stored server-side only and never exposed to the browser.

Accounts are protected by secure password hashing and support sign-in via trusted providers. Sign-in attempts are rate-limited to defend against brute-force attacks, and sessions can be revoked by signing out.

Each organization's data is fully isolated as a separate tenant. Within a workspace, granular role-based access (admin, manager, sales rep, viewer) governs what each member can see and do, enforced on the server for every request.

Significant actions across the workspace are recorded in an immutable audit log — who did what, and when — giving administrators full visibility and accountability.

Your data is hosted on managed, reputable cloud infrastructure with automated, redundant backups. Uploaded files are stored in secure object storage with signed, expiring access URLs.

If you believe you've found a security vulnerability, please report it to us at security@valtriq.space. We appreciate responsible disclosure and will investigate all legitimate reports.