Legal
Security
How ChatSked protects tenant data: isolation, encryption, and secure defaults.
Tenant isolation.
Every tenant's records carry tenant ownership enforced by database row-level security — never frontend filtering alone.
Authentication.
Sign-in is handled by the managed auth service with session protection; system administration requires an explicit administrator flag.
Secrets.
Provider API keys are encrypted at rest and never exposed to browsers; only the last four characters are shown in admin screens.
Abuse protection.
Conversations, contact, and authentication endpoints are rate-limited with administratively tunable limits, and all input is validated server-side.
Auditability.
Booking and configuration changes are written to an audit log.
