Security
We build a security platform following the practices we teach.
Encryption
Traffic over TLS. Secrets and passwords strongly hashed. Tokens with expiry and revocation.
Org isolation
Multi-tenant: each organization only accesses its own data, enforced server-side.
Authentication
httpOnly sessions, rotating refresh, OAuth (Google/Microsoft) and SSO/SAML on Enterprise.
RBAC
Strict role hierarchy (admin/manager/editor/player/guest) checked per route.
Observability
Structured logs and error monitoring to detect and respond quickly.
Privacy
Self-service data export and deletion. DPA available for Enterprise.
Report a vulnerability
Found something? Email security@puzzibly.com — we appreciate responsible disclosure.
Contact