Security
Defense in depth,
by default.
Glade uses reveal-once HMAC-digested API keys, private Postgres schemas, tenant-scoped authorization, durable quotas, atomic Redis limits, signed webhooks, and private object storage.
Credentials
Secrets remain server-side and complete API keys are never logged or stored.
Tenancy
Every dashboard and mutation resolves membership server-side; private tables are not exposed through the browser Data API.
Billing
Stripe webhook signatures and idempotent event records control entitlements.
Observability
Structured logs redact inputs; PostHog captures allowlisted product events and application errors.
Acquisition
Provider requests are bounded by timeouts, retries, circuit policy, and global budgets.
Disclosure
Report vulnerabilities privately to [email protected]. We acknowledge within two business days.