Security

Isolation and least privilege, from day one.

Tenant isolation is an architectural requirement, not a feature added after the fact.

How we isolate customer data

  • Every organization's data is scoped server-side, never trusted from a client-supplied identifier.
  • Row-level security is enforced in the database as a second, independent layer.
  • Internal tooling is architecturally separate from the customer product.

Authentication

  • Sign in with Google, Microsoft or email. Enterprise customers can connect their own identity provider via SAML or OIDC.

Certifications

  • ValueFynder does not hold third-party security certifications at this time. We'll update this page when that changes.