Trust
Security
Security controls for the preview environment are designed to support tenant isolation, authenticated access, and auditable operations.
Last updated
Control baseline
The platform enforces authenticated access and role-aware capabilities for preview workflows.
Security headers, request validation, and tenant-scoped controls are applied across the web and API surfaces.
In the hosted preview, the code and SQL you submit, the lineage built from it, and the diagrams you save are scoped to you: other visitors cannot read them.
Monitoring and response
Operational events are monitored to detect misuse, faults, and policy violations.
Incidents are triaged with containment and remediation workflows aligned to environment severity.
Reporting a vulnerability
Email [email protected] with “Security” in the subject line. Include the steps to reproduce the issue and what you observed.
The same address is published in /.well-known/security.txt.