How we protect your data.

Isolation

Every workspace's data carries its workspace id, and the database enforces row-level security so one workspace's queries can't read another's.

Encryption

TLS for all traffic. Data at rest is encrypted by our database and storage providers; access tokens, API keys and other secrets are additionally encrypted by the application before they are stored. Passwords are stored as salted hashes.

Access

Two-factor sign-in, roles and permissions, single sign-on (SAML) on eligible plans, IP allow-lists, session management and an audit log.

Payments

Card and bank details are handled by Stripe and Razorpay; they never touch our servers.

Operations

Error monitoring, health checks, rate limits, signed webhooks, automated tests on every change, and database backups with point-in-time restore.

Reporting a vulnerability

Write to security@omnimarkpro.com. We acknowledge reports quickly and don't pursue good-faith research.

Security