Security
Controls stated exactly — nothing more.
Encryption
HTTPS/TLS in transit. OAuth tokens and credentials encrypted at rest, separate from reporting caches.
Access
OAuth only — no platform passwords touch our systems. Role-based, least-privilege team access with logged actions.
Revocation
Disconnect any time. Tokens deleted promptly; cached data follows the 30-day deletion rule.
Response
Monitoring with incident response: contain, notify where legally required without undue delay, remediate, record.
Limits
No certifications or audits claimed. Issues: security@ternovia.com.