Security
Studio data, treated like studio data.
The basics, done well. We will publish formal certifications as we mature; here is exactly where we stand today.
Multi-tenant isolation
Every query is scoped to your organization at the database layer. Server-side enforcement — not UI filters that can be bypassed.
Encrypted in transit
TLS everywhere. Connections to bckendIQ and between our services use modern encryption.
Modern authentication
Industry-standard auth via NextAuth, with JWT-backed sessions and rotating CSRF tokens. SSO available at GA.
Backups & isolation
Hosted on industry-standard infrastructure with automated backups. Per-tenant data is logically isolated; production access is least-privilege.
Found a security issue? Email admin@bckendiq.com — we'll respond within one business day.