Security
Workspace isolation
Every data row carries its workspace identifier, and database-enforced access rules prevent any cross-client access.
Server-side keys
Video generation service keys are never exposed to the browser. Every privileged request goes through our server.
Roles and permissions
Roles are stored separately from profiles and verified server-side on every sensitive operation, never from the browser.
Payments
Payments are processed by our certified provider. No card numbers pass through or are stored by us.
Reporting
To report a vulnerability, write to admin@smartgrants.io. We acknowledge within one business day.