Security & privacy

SOC 2 Type II in progress. All connections OAuth where available. Messages encrypted at rest. Integrations strictly read-only by default. Data residency: US (EU coming Q4).