Security

• Strict isolation between organizations
• Cryptographically random signing tokens
• Link expiration and revocation
• Passwords hashed with Argon2id
• Two-factor authentication (TOTP)
• Strict HTTP security headers