Privacy and data security

Core rules

• Store provider tokens only in the protected connection form.
• Use least privilege and review access regularly.
• Keep secrets and unnecessary personal data out of AI requests and tickets.
• Verify HTTPS and domain before login or payment.

AI data boundary

AI requests run in organization and workspace context. Routing to Yasnora must not bypass plan, role, or source policy.

Report security

Send vulnerabilities or suspicious access to security@profitvena.ru without publishing production secrets or customer data.