Data is protected both while it's being transmitted and after it's stored. All API communication with the platform is secured using HTTPS/TLS, with traffic terminated through the reverse proxy or load balancer before reaching the application services.
At the application layer, sensitive values such as OAuth client secrets, webhook secrets, provider credentials, and HMAC signing keys are encrypted using AES-based column-level encryption before being written to PostgreSQL.
Audit records are also mirrored to an immutable immudb ledger for additional integrity. Infrastructure-level disk encryption is managed by the hosting environment, whether the platform is deployed on-premises or as a managed SaaS offering.
See how miniOrange DLP solution protects sensitive data across your environment.
