Security
Beetony runs on managed cloud infrastructure with append-only database semantics. This page covers the architecture decisions that make audit records tamper-evident and access tightly scoped. Beetony itself does not hold a SOC 2, ISO 27001, or HITRUST certification.
Infrastructure
Compute runs on Vercel's serverless platform with traffic terminated at the edge. The primary database is managed Postgres with point-in-time recovery and automated daily backups. Webhook secrets and API keys are stored only as SHA-256 hashes; we never see the raw values after issuance.
Encryption
All traffic between your product and Beetony uses TLS 1.3. Data at rest is encrypted with AES-256 by the underlying Postgres provider. Webhook payload signatures use HMAC-SHA256 keyed by a per-webhook secret.
Append-only audit
The audit_logs table has a Postgres trigger that rejects UPDATE on every record and DELETE on every live record, at the database level. Test-mode records remain deletable by design so you can clear sandbox data. Tampering with live records would require dropping the trigger, which is itself logged. Every record carries a SHA-256 immutable_hash so any later mutation is detectable cryptographically.
Access controls
Inside each customer workspace, users have one of four roles (company_admin, compliance_officer, developer, read_only). Roles map to scoped permissions on every dashboard query. Our own staff accounts are separate from customer roles and are granted through deployment configuration, not through any role a workspace can assign. Cross-tenant queries are impossible by construction; every read is scoped by company_id at the ORM layer.
Incident response
We follow a 4-hour internal acknowledgment, 24-hour customer notification, and 60-day full report standard for confirmed incidents. Security disclosures go to security@beetony.com and are acknowledged within one business day.
Penetration testing
Beetony has not yet completed an external penetration test. Customer-specific testing against your own workspace is welcome with one week of notice; coordinate via security@beetony.com.