Security · what is live

Controls that actually run

Gateway is a memory product with a card-on-file trial. This page lists the controls in production today — not a future enterprise brochure.

Founder-only admin

Production /admin opens only for the founder UUID and stitchaxis.com operator mailboxes. A paying Gateway customer cannot open the operator console, even if a role row is wrong.

Workspace isolation

Buyer data is scoped to the signed-in org. Core memory for paying workspaces persists per org. The public 10-op edge proof uses a guest bucket that never writes into a paying workspace.

Row Level Security

Supabase RLS is on for subscriptions, usage, outreach, and operator tables. Browser clients do not get grants on operator tables. The app uses the service role only after a server-side gate.

No silent outbound

Outreach drafts stay pending until a human copies them into Outlook. The app never emails a prospect. API keys are stored hashed.

  • TLS in transit (hosted on Vercel)
  • Stripe Checkout + webhook signature verification
  • Rate limits on public and execute routes
  • Trial and paid entitlements before Core execute

Not claimed

  • Not SOC 2 Type II certified
  • No custom eBPF / zero-trust mesh product
  • No dedicated regional air-gap tenancy on Gateway Solo
Start 3-day trial