Security & trust
Org tenancy, human approval, and least-privilege defaults—because spam association is an existential risk.
Organization isolation
Tenant data is scoped by organization. Server checks and RLS-oriented design keep workspaces apart.
Approve-before-send
Outbound email requires explicit human approval. Autonomous blast modes are out of scope for our wedge.
Secrets & env
Server secrets never ship as NEXT_PUBLIC_*. Zod-validated configuration fails closed when required keys are missing on feature paths.
Least logging
Structured logs redact secret-shaped fields. Avoid dumping message bodies or raw PII into drains.
Subprocessors
| Vendor | Role |
|---|---|
| Vercel | Application hosting |
| Supabase | Auth and Postgres |
| OpenAI | Scoring and draft generation |
| Brevo | Transactional email delivery |
| Sentry | Error monitoring |
| Stripe | Billing (when enabled) |
Report security issues to security@nirune.com (replace with your production alias before launch).