Security
Security and human control, enforced on the server
How ACTIQO protects your workspace. We do not currently hold third-party security certifications.
Tenant isolation
Row-level security scopes every record to its organization.
Role-based access
Builders design, operators run and approve, viewers read.
Approval enforcement
Approvals are tied to a run, workflow version and payload — checked by the backend.
Outbound request safety
HTTPS only; private networks, local hosts and redirects are blocked.
Prompt-injection defence
Uploaded and external content is treated as untrusted data, never as instructions.
Audit trail
Key actions are logged per workspace.
