Security controls
- Workspace-scoped database queries and synchronization streams limit data access to the active workspace session.
- OAuth integration tokens are encrypted with AES-256-GCM before storage when integrations are configured.
- Stripe webhook signatures, MCP bearer tokens, protected cron jobs, request validation, and database-backed rate limits protect sensitive interfaces.
- Uploaded files are size-limited, type-allowlisted, signature-checked, isolated by workspace, and served as downloads with content sniffing disabled.
- Automated tests, migration checks, production builds, and browser accessibility smoke tests run in continuous integration.
Current product boundary
Planewalker is still completing its production identity layer. Demo roles are a product preview and are not an authoritative authorization boundary. Do not use a preview deployment for sensitive production data until real authentication and server-derived membership enforcement are enabled.
Responsible disclosure
If you believe you found a vulnerability, email sales@exponential.app with a clear description, affected URL, reproduction steps, and potential impact. Please avoid accessing other users’ data, disrupting service, or publishing details before we can investigate.
Operational resilience
Production operators should monitor the health endpoint, keep database migrations current, configure cron and integration secrets, and maintain tested database backups. Security events and material control changes will be reflected on this page.