Trust Center

Security architecture

A practical overview of the controls currently implemented in Trytracegrid.

Tenant isolation

Application queries use a dedicated PostgreSQL role without BYPASSRLS. Each authenticated transaction sets a user context and database row-level security enforces workspace membership. Administrative database access is reserved for documented authentication, webhook, migration, and scheduled-job paths.

Credentials

OAuth tokens are encrypted server-side in versioned envelopes. The active key has an identifier and previous keys may remain available during a controlled rotation. Credentials are never returned to browser code and are deleted when a connection is disconnected.

Sessions and application controls

Email verification, password reset, session revocation after password reset, inactivity expiry, absolute expiry, role checks, rate limits, security headers, and framing protection are implemented. Write authorization is rechecked on the server and does not rely on a hidden button or client state.

Write safety

Production workspaces remain read-only during the beta. GTM uses separate draft and publish approvals. UTM updates require an approval for an exact before-and-after field change. A rollback control is shown only when a restorable snapshot is available.

Current assurance status

No SOC 2, ISO 27001, independent penetration-test, or uptime-SLA claim is made at this time. Report a suspected issue through the vulnerability disclosure process.