Security Overview
xTrakt security depends on authentication, tenant isolation, auditability, secret management, and controlled operational access.
Principles
| Principle | Practice |
|---|---|
| Tenant isolation | Scope data by tenant and subscription context |
| Least privilege | Grant users and API keys only the access they need |
| Auditability | Record creation and change metadata |
| Secret protection | Store credentials in secret managers, not source control |
| Privacy | Limit support data to what is needed for investigation |