Security

AiPowr is built with security as a foundational principle. This page outlines our security practices.

Authentication

Passwords are hashed with bcrypt (12 rounds). Sessions use JWT tokens stored in httpOnly cookies.

Authorization

Every API request is verified for authentication, workspace membership, and role-based permissions.

Multi-Tenancy

All data is isolated by workspace and company. Cross-tenant access is prevented at the database query level.

Audit Logging

All security-sensitive operations are logged with actor identity, action, resource, and timestamp.