Security

Last updated: 2 November 2026

Your workspace, your data, your approvals. This page summarizes how AfaTeam AI protects them.

Workspace isolation

Every client workspace is separated at the database level with row-level security, so one workspace can never read or change another workspace's data.

Private agent infrastructure

Agents run on a private server reached only through an authenticated tunnel. No agent endpoint is exposed to the public internet.

Approvals and audit trail

Risky actions wait for approval from an Owner or Admin. Every task, approval and decision is written to an append-only audit log.

Secrets

API keys and integration tokens are stored server-side only and never sent to the browser or written to logs.

Encryption

All traffic uses HTTPS through Cloudflare. Stored data is encrypted at rest by our infrastructure providers.

Report a vulnerability

If you find a security issue, contact us with details. We acknowledge reports within 3 business days.

Questions about this page? Contact AfaTeam AI through the form on afateamai.com or at afateamai@gmail.com.