Security overview engineering package ready · pending counsel sign-off
Package 2026.08.22-fix11 · Proposed effective date 2026-09-01 · PDF · Counsel review package
Security Policy
Organizational and technical measures for protecting customer data. For implemented controls and subprocessors, see the Trust Center. Download the security overview draft: mizu-crm-security-overview.pdf.
Encryption
Application-layer encryption for secrets; TLS for data in transit.
SOC 2-aligned controls
Security controls implemented in-product; Type II attestation in progress.
Infrastructure
Managed cloud hosting with org-scoped data access (Supabase RLS).
Monitoring
Audit logging and error monitoring integrated with production tooling.
Compliance
GDPR export and request tooling; HIPAA configurations on Enterprise.
Access Control
Role-based permissions, SSO, and multi-factor authentication.