Security
Security Policy
Our approach to securing PawOS, your account, and your data.
Last updated: 31 August 2026
1. Overview
See our Security documentation page for a technical overview of encryption, authentication, runtime isolation, and credential storage. This policy covers our security commitments and process.
2. Authentication and account security
Accounts are authenticated through Supabase Auth, supporting email/password and Google sign-in. We encourage a strong, unique password and recommend enabling any additional account-security options your Google account itself offers when you sign in with Google.
3. Credential and connector storage
Organization-shared infrastructure credentials are stored in an encrypted vault, never in plain text. Individual-use Connectors rely on your own already-authenticated CLI/API session or an OAuth grant scoped to the permissions you approve, rather than PawOS independently storing broad standing access to your cloud accounts.
4. Data isolation
Organization Workspace data is scoped with row-level security so that one Organization's data is never visible to another, enforced at the database layer rather than solely in application logic.
5. Reporting a vulnerability
See our Vulnerability Disclosure Policy for how to responsibly report a security issue to security@revantaai.com.
6. Contact
General questions about this document: legal@revantaai.com. Privacy and data-protection requests: privacy@revantaai.com. Security reports: security@revantaai.com, following our Vulnerability Disclosure Policy. See also our Grievance Officer contact above where this document includes one.
7. Changes to this document
We may revise this document as PawOS's features or applicable law change. The date at the top of this page reflects the version currently in effect. Where a change is material, we will note it in our Changelog and, where required by law, notify affected users directly (for example, by email or an in-app notice) before the change takes effect. Continuing to use PawOS after a revised document takes effect constitutes acceptance of it.