Access
Integrations receive the minimum permission required to complete the named workflow. Shared inboxes and god-mode tokens are not an acceptable starting point.
Security
Least privilege. No theatre.
Security is part of the system design, not a badge at the bottom of the page.
Data
We prefer to operate inside your CRM, inbox, and storage. Copies are not the default. When a working copy is required for staging, it is scoped, time-boxed, and deleted when the prototype is done.
Supervision
Anything that sends a message, files a document, or changes a record can be gated on a human approval. Agents propose. People release the action that carries risk.
Logs
Production systems ship with a record of what moved, when, and under whose authority.
Report a concern
Write to hello@trishor.in with “Security” in the subject. Do not send secrets in the first message.