Individual access.
Release records and activity events are scoped to the signed-in account. Checks apply to reading, changing, and removing records.
A clear boundary.
A considered workspace.
Understand the controls included in this release and the decisions that remain yours.
Protected sessions.
Passwords are hashed. Changes require a security token. Password reset links expire and work once; a password reset invalidates existing authenticated sessions.
Data controls.
Export records as CSV or JSON. Delete releases or remove the account and its active workspace data. The demo stays in local browser storage.
No hidden connections.
This release does not connect to source repositories, CI, AI models, or deployment systems. Do not store credentials or private keys in release notes.
Report a security concern.
Email jose@bizarthahq.com with a short description and the minimum information needed to reproduce the issue. Do not include credentials or other people’s data.
No independent SOC 2, ISO 27001, or other security certification is claimed.