Least privilege, isolation and auditability by default.
Read-only scopes where the provider supports them. Credentials are encrypted with AES-256-GCM using an environment-managed key and never leave the server.
Each supplier's data is isolated with PostgreSQL row-level security in addition to server-side authorization on every action.
Buyers only receive licensed versions via short-lived signed links or scoped, expiring API keys. Every access is logged.
Append-only audit log, rate limiting, account lockout, security headers and webhook SSRF protection. We do not claim certifications we do not hold.