Skip to content
CoreLayerEngine
ProductPlatformsSolutionsResourcesPricing

Security & privacy

5 articles. Every one of these is the same text the product shows inside the console.

System health (platform admin)

Live operational state of this deployment — stores, providers, queues and the sweeps that run on the tick.

Why it mattersIt answers “is it the platform or is it this account” before anyone starts guessing, which is the question that costs the most time during an incident.

How

  1. Open Admin → System health.
  2. Red means the capability is unavailable, not merely slow.
  3. Compare against /readyz if you need the same view without signing in.

healthopsuptimeadminplatformlive

Abuse signals (platform admin)

Accounts near their limits, rate-limit trips and suspensions, in one list.

Why it mattersOne workspace burning shared provider quota degrades everyone else, so it is worth seeing before the provider does the noticing for you.

How

  1. Open Admin → Abuse signals.
  2. Near-limit is a warning, a trip has already been refused.
  3. Suspensions are manual and reversible from the same row.

abuselimitsrate limitsuspensiontripsadmin

Two-factor authentication (MFA/TOTP)

Protect your login with a time-based code from an authenticator app, plus single-use recovery codes.

Why it mattersMFA stops account takeover even if your password leaks — essential for business accounts.

How

  1. Open Profile → security card → 'Set up two-factor'.
  2. Scan the QR with Google Authenticator/Authy and enter the 6-digit code.
  3. Save your recovery codes somewhere safe. Admins can require MFA org-wide.

mfa2fatotpauthenticatorsecurityloginrecovery codes

Data residency / region

Every workspace's data is stored in India. India is the only region we operate — there is no EU, Singapore or US region to move to.

Why it mattersSaying so plainly is the point: an unstaffed region on a dropdown is a compliance claim we could not honour, and a customer who needs EU hosting should hear no before they buy, not after.

How

  1. Open Profile → region to see where this workspace is homed; today that always reads India.
  2. If your contract or regulator requires hosting elsewhere, talk to us before purchasing — we will tell you honestly whether we can serve it.
  3. A request for a region we do not hold is refused rather than quietly served from India, so the setting always reflects reality.

residencyregiondatagdprdpdpcompliancewhere dataindiaeusingapore

Privacy: consent, AI disclosure & data requests

Built-in consent capture, AI-content disclosure tagging, and data-subject request (DSAR) handling.

Why it mattersKeeps you compliant and transparent with customers about AI-generated content and their data rights.

How

  1. Disclosure tags (e.g. #ad) are applied automatically where required.
  2. Use the Legal/Privacy area to handle consent and DSARs.
  3. Contact support to action a data export or deletion.

privacyconsentdsarai disclosuregdprdelete datacookie