Security
Hosting in Canada
The application, database, file storage and system email run on an OVHcloud server in Beauharnois, Quebec, Canada.
Encryption in transit
HTTPS connections use TLS encryption in transit.
Stored integration credentials
Stored integration access and refresh tokens are encrypted with AES-256-GCM. The encryption binds each token to its purpose and connection identifier.
Two-step sign-in
Accounts can use time-based one-time codes (TOTP) for two-step sign-in. Sensitive actions have server-checked requirements for two-factor authentication or recent identity verification.
Audit log
The organization audit log records security and administrative events and supports filtering and export for authorized administrators.
Role-based permissions
The server checks organization roles, workspace membership and module permissions when authorizing requests.
Tenant isolation
PostgreSQL row-level security checks organization and workspace scope using tenant context signed by the server.
Backups
Nightly database backups are stored on the server.
Sub-processors and contact
For security questions, email support@unifydesk.app.