Security Overview
Current controls and honest limitations; not a certification or warranty.
Isolation and access
Authenticated access and PostgreSQL row-level policies scope customer records. Screenshots use a private bucket and authenticated delivery. Service-role and email keys remain server/worker-only.
Browser safety
Only Go to, Click, Fill and Expect text are accepted; arbitrary customer JavaScript is forbidden. Target origins are constrained and private, loopback, link-local and reserved networks are blocked, including redirects and re-resolution.
Secrets
Sensitive values use server-side authenticated encryption, masking and redacted errors. The production envelope backfill is observed as complete, but deployed web/worker key alignment and execution still need validation. Do not use real credentials before that check.
Operational controls
Jobs use constrained queues, leases, idempotent notification state and confirmation retries. Dependency checks, database advisors, incident response and retention automation are release requirements.
Report a concern
A security contact is not yet published because the legal operator contact is missing. Commercial launch remains blocked until a monitored security mailbox and incident owner exist.
Last substantive version: 2026-09-16. Seek qualified Belgian legal advice before relying on this draft for commercial contracting.