Security & access

Separate businesses.
Review every change.

Security controls support your workflow; they do not replace provider access settings, careful user administration or your own account security.

Create an account Request a demo

Implemented controls

Access follows the business.

ACCESS

Roles and isolation

Business-scoped queries and owner, manager and viewer roles restrict access. Last-owner removal is guarded.

CREDENTIALS

Protected token storage

Platform tokens are encrypted at rest. Server credentials are held outside the public website; production database connections require TLS.

SIGN-IN

Account security

Google or password panel sign-in, throttling and optional authenticator MFA. MCP sign-in supports Google or a Konektr password. Password sign-in requires your authenticator or recovery code when Konektr MFA is enabled; Google sign-in follows Google account security.

CHANGES

Preview and Activity

Supported mutations require approval and scoped ownership checks; attempts and outcomes are recorded.

RECOVERY

Encrypted local backups

Local backup routines exist. Verified off-server delivery and a complete restore exercise remain pending.

LIMITS

No invented certifications

We do not claim SOC 2, ISO certification, enterprise SSO, guaranteed uptime or completed operational compliance.

Your checklist

Keep your account secure.

Enable authenticator MFA in your Konektr account and MFA with connected providers.
Invite only the people who need access; regularly review business roles.
Use revocable credentials and remove unused connections at the provider.
Inspect a proposed write before approving it.
Report security concerns to support@konektr.io without sending secrets.

TLS-verified email alert delivery and a 15-minute app-health/local-backup monitor are operational. Off-server backups, provider security-alert verification and a complete restore drill remain pending. The latest audit is not a guarantee that attacks or vulnerabilities are absent.