Security & trust

Security is the foundation, not a feature.

Muenot is built multi-tenant from the ground up. Your data stays isolated, access is enforced on the server, and every sensitive change is logged.

Every request is scoped to your tenant server-side. The authoritative tenant comes from your verified session, never a host header.

Granular permissions on every module and record, with least-privilege defaults and platform/tenant role separation.

Data is encrypted in transit with TLS and at rest. Secrets and sessions use domain-separated signing keys.

Sensitive actions are recorded to an append-only audit log with actor, tenant, IP and request correlation.

Custom domains resolve to a tenant only after ownership is verified and the mapping is active.

Rate limiting, idempotent writes, maintenance gating and billing write-locks protect availability and integrity.

Have a security or compliance question?

Our team is happy to walk through architecture, data handling and compliance controls for your organization.