Security

Encryption in transit (TLS) and at rest (AES-256-GCM for integration tokens).

Least-privilege, read-only accounting scopes. Full audit log of every agent decision.

Payments are handled by your own payment provider; we never touch payer funds.