Encryption
- Production browser, API, OAuth callback, and provider traffic uses HTTPS/TLS.
- Production hosting uses server, database, backup, and storage controls appropriate for organization-scoped customer data.
- Integration credentials and tokens are encrypted with AES-256-GCM using the production `SENTRIA_CREDENTIALS_KEY`.
- Plaintext provider secrets are not returned by API responses and are not included in customer exports.
Token handling
- Provider secrets are stored only in encrypted credential fields.
- Full passwords, app-specific passwords, API keys, OAuth tokens, cookies, and CSRF tokens are never shown after save.
- Audit metadata redacts sensitive fields before storage.
- Provider-side revocation remains required when a connected account should no longer authorize Sentria at the provider.
- Write-back remains off until explicitly enabled and stays guarded by preview, conflict, and volume controls.
Audit logs
- Security audit events are organization-scoped and visible to admins in the Admin page.
- Auth, integration, credential, cleanup, and write-back decisions are logged with hashed request context.
- Write-back operation records remain the detailed evidence for planned, approved, applied, skipped, retried, and blocked operations.
- Admin changes to public integration-provider availability are audited.
Incident process
- Detect, triage, assign severity, contain, preserve evidence, and identify affected organizations and routes.
- Pause routes or disable write-back where needed.
- Notify affected customers without undue delay after confirming a personal-data breach affecting customer data.
- Close with root cause, remediation, prevention tasks, and credential/key rotation where needed.
Access controls
- Workspace data is scoped by organization and API requests resolve the active organization before reading or writing business records.
- Sync-only users are limited to Sync surfaces and cannot switch into CRM screens unless module rights are granted.
- Admin is restricted to approved Sentria administrators and is not exposed to ordinary workspace members.