Security

Security at Strabora

Strabora is designed around tenant isolation, controlled authorization and server-side protection of privileged operations.

Last updated: October 12, 2026

01

Tenant isolation

Workspace data is designed to remain isolated between organizations. Database authorization policies provide an additional control layer for tenant-scoped access.

02

Authorization

Strabora separates authenticated user access from privileged server-side operations.

Sensitive operations are subject to authorization and governance controls rather than relying solely on client-side restrictions.

03

Server-controlled operations

Privileged operations such as sensitive AI result writes and server-owned records are handled through trusted server pathways.

Browser users are not granted direct access to protected server-only tables where such access is not required.

04

AI governance

AI-generated work is separated from human authorization for consequential actions.

Draft generation does not automatically mean approval, authorization or execution.

05

Authentication and account security

Strabora uses authenticated access controls and provides account security functionality appropriate to the application.

Users should protect their credentials and report suspected unauthorized access promptly.

06

Auditability

Relevant AI task and governance workflows can create structured events and records to support review, accountability and troubleshooting.

07

Security limitations

No online service can guarantee absolute security. Strabora continuously evaluates and improves its security controls as the platform develops.

08

Reporting a security issue

If you believe you have discovered a security vulnerability or unauthorized access involving Strabora, report it promptly through an appropriate Strabora security or support channel.

Do not include passwords, authentication codes, API keys, private keys or other secrets in a security report.