Access control
Verified accounts, workspace membership and server-side permissions protect every private route.
SMR Softech
Security
Controls for identity, tenant isolation, data access, provider secrets and auditable operations are built into the platform.
Data boundaries
Tenant-owned records are scoped to their workspace and checked before access or mutation.
Secret protection
Provider and payment credentials remain encrypted or in environment configuration and are never returned to users.
Commercial integrity
Credits use an immutable integer ledger; payment state is verified on the server.
Abuse controls
Authentication, generation, upload, webhook and administrative endpoints are rate limited.
Auditability
Sensitive account, credit, provider and administrative actions create traceable audit records.