Security & Trust
Client data, protected by design.
Your clients trust you with their data — Addlaa is built to keep it isolated and secure, so your agency passes the strictest client and enterprise security reviews.
Controls
Enterprise-grade, from the first byte.
The security foundations behind the Addlaa platform.
Encryption in transit & at rest
All traffic is served over TLS. Connector access tokens are encrypted at rest with AES-256-GCM, so a database snapshot never exposes a usable credential.
Passwords hashed with scrypt
Account passwords are stored as salted scrypt hashes — never in plain text, and never reversible back to the original.
Signed, fail-closed sessions
Sessions and share tokens are signed with HMAC and verified on every request. A tampered or expired token is rejected outright, not trusted.
Role-based access & workspace isolation
Least-privilege roles across users and teams, with each client's data confined to its own workspace and enforced on every request — one client's data can never surface in another's.
Data minimization by design
In the demo, uploaded files are parsed in your browser and only a bounded analysis snapshot is retained. Your raw data is never sold, and isn't stored on our servers.
Revocable, expiring share links
Report links are cryptographically signed, can carry an expiry, and can be revoked at any time — so access ends the moment you decide it should.
Compliance
Our approach to compliance.
We design Addlaa to meet the expectations of enterprise security and data-protection teams. Our data handling is described in our Privacy Policy and Cookie Policy. Formal certifications and third-party audits are part of our roadmap as the platform matures; we will publish them here as they are completed rather than claim them before they are in place.
If your team has specific security, data-residency, or due-diligence requirements, we're glad to walk through our architecture and controls. Contact security@addlaa.com.
Have a security question?
Our team is happy to walk your stakeholders through how Addlaa protects your data.