How your data is kept apart and accounted for.

Boards, tasks and stages are protected by row-level security in the database, so one workspace cannot read another's rows. Privileged database helpers are not callable by the public or anonymous roles.

• Board roles: owner, editor, viewer and contributor
• Per-stage viewer lists and a per-user create, read, update and delete matrix
• Admin-only stages
• Creating a board needs permission

• Activity log written by the database, not the browser
• Audit export: a CSV of the activity log for any date range, guarded against spreadsheet formula injection

Export your boards to CSV or Excel at any time, up to 10,000 rows per export.

Write to [email protected] and describe what you found. Include what you did, what happened, and roughly when — a timestamp makes the activity log usable on our side. If you have a proof of concept, send it; we would rather read it than guess.

Please do not run tests against other people's workspaces, and do not use real customer data in a report. We will tell you what we find and what we change.