Security

Business access should be deliberate, not assumed.

SATHOS is designed around organization isolation, permission checks and explicit confirmation for controlled actions.

Security by boundaries

Access follows identity, organization and responsibility.

SATHOS uses layered checks rather than trusting a page, link or browser-supplied identifier. Protected operations are evaluated against authenticated context and the underlying service rules.

01

Organization boundaries

Business records are resolved from the authenticated organization context rather than an organization identifier supplied by the browser.

02

Service and role checks

A service must be enabled for the organization and the signed-in user must hold the required permission.

03

Controlled Agent actions

Supported write actions show a scoped preview and require an expiring confirmation before execution.

04

Connector credential handling

Connection secrets belong in protected server-side configuration paths and are never displayed back in the customer interface.

05

Truthful connection states

Simulator, Test Mode, Draft, disconnected and live states remain distinct so testing cannot be mistaken for delivery.

06

Bounded business access

Agent and workspace queries use validated inputs, bounded results and the same organization and permission checks as the underlying service.

SATHOS responsibility

Protect platform boundaries.

  • Authorize access at protected backend operations
  • Keep organization records separated
  • Use explicit confirmation for supported sensitive actions
  • Describe unavailable and Test Mode capabilities truthfully
Customer responsibility

Protect people and business use.

  • Invite only authorized team members
  • Assign the minimum permissions each role needs
  • Review confirmations and connected-service states
  • Report suspected account or access problems promptly
Safe communication

We will not ask you to email sensitive credentials.

Never send passwords, OTPs, access tokens, app secrets, encryption keys, webhook secrets or full database connection strings by email.

Ready to explore SATHOS?

Request access for your organization or sign in to an approved workspace.