Security at the core of the platform

Data protection

• All traffic encrypted in transit (HTTPS/TLS, HSTS).
• Credentials for your tools (catalogs, CRM, CMS) encrypted before storage.
• Strict data isolation between workspaces.

Access control

• User authentication and per-workspace roles.
• Keys and secrets kept server-side, never exposed in the browser.
• Technical and monitoring endpoints not reachable from the Internet.

Abuse prevention

• Rate limiting and quotas per visitor and per workspace.
• Detection of automated behavior on the public widget.
• Capped AI usage budgets per workspace.

Report a vulnerability

Think you have found a security issue? Email us at contact@navinspire.com. We acknowledge reports promptly and handle each one as a priority.