Security, in plain English.
What protects your apps and data today, and what isn't in place yet. If something here isn't clear, ask us.
In place today
Only the people you invite can open your app
LiveYour live app asks everyone to sign in, and only people you've added to it get in.
Every record is checked, every time
LiveEach read and each change is checked on our server against the roles in your app. There's no per-app login code for anyone to get wrong.
Your data is kept separate from every other business
LiveEvery request is scoped to your organization and your app, so nobody else's app can reach your records.
Test data never touches your real data
LivePreviews run on sample data stored separately from your live app.
Every change is versioned and can be rolled back
LiveEach change to your app is saved as a new version. Put an earlier one back in one click.
AI never runs code on your data
LiveYour app is a configuration drawn by one tested renderer. What the AI writes is checked against strict rules before it can be used, and text is always shown as text.
A history of who changed what
LiveEvery record keeps a log of who created it, edited it or moved it to the next step, with their comments.
Encrypted on the way
LiveEvery connection to Matrixcape uses HTTPS.
Limits that slow down abuse
LiveSign-ins, sign-ups, AI requests and changes are rate-limited.
Payments go through a PCI-compliant processor
LiveCard payments are handled by a PCI-compliant payment processor. We never see or store full card numbers.
Not in place yet
We'd rather tell you than have you find out.
- Certifications such as SOC 2 or HIPAA. We don't have them, so please don't put health records, card numbers or government ID numbers in your apps.
- Single sign-on (SSO).
- An uptime guarantee (SLA) or a private deployment.
- Self-serve export of your data. Until it ships, ask us and we'll send you a copy.
Found a problem?
Email admin@matrixcape.com and a person will read it.