Trust

Security is a P0, not a checkbox.

Multi-tenant by design, with isolation, secret management and recovery built into the platform.

Tenant isolation

Every query is scoped to the company; cross-tenant access is blocked and audited as a P0 control.

Secrets management

Runtime secrets live in Infisical, never in code or the database. Credentials are injected at runtime.

Encryption in transit

All traffic is served over TLS; the dashboard is reachable only over the private tailnet in v1.

Backups & DR

Nightly backups with checksum verification and measured RPO (<15m) / RTO (<30m) restore drills.

Queue reliability

Integration jobs are idempotent with retries and a dead-letter queue — no double side-effects.

Observability

Pipeline metrics, SLOs, error tracking (Sentry) and alerting on failures and stuck launches.

Reporting a vulnerability

Found a security issue? Email security@gofyio.com with details and steps to reproduce. We acknowledge reports promptly and will keep you updated on remediation.

Data handling

See our privacy policy for what we collect and how it is processed.