Security and privacy
Taktify stores credentials encrypted, locks accounts for 15 minutes after five failed attempts, supports revocable sessions and single sign-on per organization, and records changes in an audit log. Hosting in the EU in the plans we run.
How Taktify protects credentials, controls access and makes changes traceable. The statements describe the product, not a certificate.
-
Encryption
Platform credentials, client secrets and AI keys are stored encrypted, using ASP.NET Data Protection. The keys live in a folder of their own.
Media links that platforms use to fetch files are signed and expire.
-
Access and sign-in
- Local accounts with hashed passwords, or single sign-on through OpenID Connect per organization, found by email domain.
- After 5 wrong passwords the account is locked for 15 minutes.
- Sessions can be revoked one by one, and all at once when the password changes.
- Five fixed roles decide who may do what. Nobody can approve their own post.
-
Audit log
An audit log records changes to members, roles, links, channels, AI connectors, providers and settings, as well as approvals and rejections.
Actions by the parent organization appear in the log of both sides.
-
Hosting and network
- Hosting in the EU in the plans we run.
- When self-hosting, all data stays on your infrastructure.
- The code is released under the MIT license and can be inspected.
- Addresses of OpenID Connect providers on private networks are blocked for organizations by default (protection against server-side request forgery).
Questions about security?
We are happy to answer them in a call or in a demo.