All features

Security & trust

Your accounts are your reputation.

Two-factor sign-in, encrypted credentials, strict tenant isolation and an audit trail for every important change — plus the operational discipline to recover when things go wrong.

AUDIT LOG
01

Strong sign-in

Passwords with lockout protection, authenticator-app 2FA, session management and sign-in history.

02

Tenant isolation

Every record belongs to a workspace. Tests prove workspace A can never read workspace B.

03

Audit trails

Billing, access and publishing changes are recorded with who, what and when.

04

Prompt-injection defenses

Scraped pages and documents are treated as untrusted reference material, never instructions.

Capabilities

Everything in security & trust.

StagesFoundationCore platformLaunchFirst releaseAutopilotAI autopilotGrowthTeams & growthExploringUnder evaluationNeeds X approvalEnabled only once X grants accessStages show the order we're building in, not release dates.

Security, privacy & platform rules

Protect credentials, customer data and authorized actions.

  • Tenant-isolation tests

    Foundation

    Prevent one customer reaching another customer's records.

  • Credential rotation

    Launch

    Replace provider and encryption keys safely.

  • Secret redaction

    Foundation

    Keep secrets out of logs and support tooling.

  • Automation consent records

    Launch

    Prove what the user authorized the app to do.

  • Prompt-injection defenses

    Autopilot

    Stop scraped pages or documents controlling the app.

  • Data retention and deletion

    Launch

    Keep data only for its defined purpose and lifetime.

  • Audit trails

    Foundation

    Trace important billing, access and publishing changes.

  • Abuse detection and suspension

    Launch

    Stop compromised or abusive workspaces promptly.

  • API input and network defenses

    Foundation

    Protect endpoints and outbound fetches.

  • Policy and capability review

    Launch

    Keep feature access aligned with changing provider rules.

Login & identity

Know who is signed in and keep their account secure.

  • Email and password login

    Foundation

    Let customers create an account and return securely.

  • Email verification

    Foundation

    Confirm that a person controls their email address.

  • Password recovery

    Foundation

    Recover access without exposing passwords.

  • Session revocation

    Launch

    Sign out one device or every device.

  • Social sign-in

    Growth

    Offer optional Google or other approved login providers.

  • Multi-factor authentication

    Launch

    Protect billing owners and administrators.

  • Login abuse protection

    Foundation

    Slow credential stuffing and repeated failed attempts.

  • Login history

    Growth

    Let customers investigate unusual access.

  • Email address changes

    Growth

    Change the login email without losing ownership.

  • Account closure

    Launch

    Let a customer leave safely.

Railway, operations & admin

Make the backend deployable, observable and recoverable.

  • API and worker services

    Foundation

    Deploy request handling separately from background processing.

  • Private database and Redis networking

    Foundation

    Keep data services off the public internet.

  • Staging and production isolation

    Foundation

    Test integrations without touching real customer money or posts.

  • Migration discipline

    Foundation

    Evolve the schema safely across releases.

  • Health and readiness

    Foundation

    Detect when a service can accept useful work.

  • Structured monitoring

    Foundation

    Find the cause of a slow or failed run.

  • Backups and restore drills

    Foundation

    Recover durable customer and financial data.

  • Release and rollback checks

    Foundation

    Prevent a deploy from breaking queued work.

  • Operator control tools

    Foundation

    Resolve failed payments or uncertain publishes with an audit trail.

  • Capacity and outage playbooks

    Launch

    Know when and how to scale or pause the platform.

Your next post has a moment.

Connect an account, describe your voice and let Kairo Post find it.