Encrypted credentials
Tenant client secrets and delegated OAuth tokens are encrypted at rest with AES-256-GCM using your deployment secret key.
Algorithm
const ALGORITHM = "aes-256-gcm";Migration Tab assumes every tenant boundary is sacred. Credentials are encrypted, data is org-scoped, and live mutations stay behind explicit human approval.
Tenant client secrets and delegated OAuth tokens are encrypted at rest with AES-256-GCM using your deployment secret key.
const ALGORITHM = "aes-256-gcm";Supabase Row Level Security on every table and storage path. Workspace members cannot read another organization's data.
ALTER TABLE jobs ENABLE ROW LEVEL SECURITY;Cloud mutations require MIGRATIONTAB_ALLOW_LIVE_MUTATIONS=true plus typed job approval.
MIGRATIONTAB_ALLOW_LIVE_MUTATIONS=falseOperators run jobs and edit mappings. Admins manage tenants, SPE grants, and approve live operations.
role: "owner" | "admin" | "operator"Job creation, tenant changes, mapping updates, and approvals write to an org-scoped audit log.
audit_events (org_id, action, …)SPE Loop access and group Forms require explicit operator action in the customer tenant.
Set-SPOApplicationPermission … Loop Web