Security
A plain description of the controls implemented in Deltryx today — each one in the code and, where noted, covered by automated tests. We do not hold third-party certifications and do not claim any.
Row-level security on every customer table. The application connects with a role that cannot bypass it, and every query runs inside a transaction scoped to your organisation.
Platform tokens, webhook secrets and API keys are encrypted at rest with AES-256-GCM and a random IV per operation. Server keys and share links are stored only as hashes.
Passwords are hashed with scrypt. Two-step verification with TOTP and recovery codes, with an organisation-wide requirement if you want one.
Six roles — owner, admin, analyst, media buyer, viewer and client — checked on the server for every page and action. An audit log records who did what, to what, and when, and can be exported.
Rate limits before password hashing, signed store webhooks compared in constant time, replay protection by delivery ID, and bot filtering on the pixel.
A content security policy with a per-request nonce and no inline scripts, HSTS, frame denial, no MIME sniffing and a strict referrer policy.
Customer email and phone are stored as SHA-256 hashes; raw payload archives are scrubbed of identifiers and expire after 90 days. Privacy requests to export or erase a person's data are built in.
Deltryx AI has read-only tools scoped to your workspace, treats your content as data rather than instructions, and cannot execute changes without a person's approval.
If you believe you have found a security issue, email [email protected] with the subject "Security" and the details. Please give us reasonable time to fix it before disclosing it publicly.
Not at this time. We prefer to describe what is implemented rather than display badges we have not earned.
On servers hosted by Hostinger, behind Cloudflare's network. See the subprocessor list in our privacy policy.
Not yet. SAML and OIDC single sign-on are not built; two-step verification is available for every account.
Start a free trial and connect a store and an ad account, or book a walkthrough with our team.