i15s / SECURITY
Clear boundaries.
Explicit access.
Self-hosted identity built on Better Auth. Workspace permissions enforced on the server, with PostgreSQL row-level isolation as an additional safeguard.
Your account
Password authentication, TOTP setup and session revocation. Production requires email verification and HTTPS.
Workspace separation
Membership is checked before selecting a workspace. Roles do not automatically grant access to every product or resource.
AI is not a shared password
AI identities have an explicit responsible member and saved spending policies. AI execution is not enabled in this preview.
Traceable administration
Workspace, member and agent changes record audit events in the same transaction as the change.
These are implementation details, not a certification or an uptime guarantee. Production hosting, recovery testing and product SSO rollout require separate validation before launch.