Security & access

Tenant isolation

Every tenant runs its own isolated stack — separate namespaces, databases, and networks. There is no shared blast radius between tenants, and rented marketplace hardware is isolated from its operator.

Organizations & roles

Access is organized around organizations with five roles:

• Owner — full control, including billing and deletion.
• Admin — manage infrastructure and members.
• Member — day-to-day infrastructure work.
• Viewer — read-only access.
• Billing — invoices and payment methods only.

API tokens inherit these limits: a token is always capped at the role of the user who created it.

Single sign-on

Authentication runs through the platform's identity provider with SSO sessions, so access can be centrally granted — and centrally revoked.

Encryption

Storage volumes support encryption at rest, and cross-site traffic rides an encrypted overlay. TLS terminates at the edge for every public endpoint.

Audit trail

Because every change is an automation job, the job history is a complete, replayable audit log of your infrastructure.