Tenant separation
Agency-scoped queries and permission checks are intended to prevent one agency from accessing another agency’s private clients, releases, commercial terms or reports.
Authentication and account controls
Authentication, optional MFA controls and security settings help reduce unauthorised access.
Role-based permissions
Publishing, billing, reporting, team administration and sensitive Admin controls can be separated.
Request and abuse protection
CSRF controls, rate limiting, Turnstile where configured and secure public tokens protect exposed workflows.
Auditability
Important account, commercial, publishing, distribution and administrative actions can be recorded in audit/history tables.
Backups and recovery
Backup, verification and restore-test records are part of operational controls.
Secrets stay private
Provider API keys belong in protected configuration—not public HTML, JavaScript, support messages or PR content.
Security is ongoing
No platform can promise absolute security; preventive controls, monitoring, auditability and recovery must continue to be tested.