StartupCore

Security

Learn how StartupCore protects tenants, environments, API keys, and data.

Tenant isolation

Every tenant is fully separated at the data layer.

Environment isolation

Sandbox and production never mix.

API key separation

Public widget keys vs secret server keys.

Domain/origin validation

Requests are checked against allowed domains.

Runtime usage checks

Limits enforced on every API call.

Billing/data boundaries

Clear separation of billing and usage data per tenant.

Audit logs

Admin and tenant actions are tracked.