Separate workspaces
Workspace data is scoped to its own account. Agencies keep each client’s contacts, content, and connections in a separate workspace.
Security
Your marketing workspace holds customer information, content, and connected accounts. Separation, permissions, and a record of activity are part of how Unafi handles that responsibility.
How the platform is built
Workspace data is scoped to its own account. Agencies keep each client’s contacts, content, and connections in a separate workspace.
Connected-channel credentials and API keys are encrypted at rest. Saved secrets are used by integrations without being shown again in plain text.
Roles and permissions govern what team members can do. Accounts support two-factor authentication, and API keys carry explicit scopes.
An activity history records work by people and AI, including the approvals behind it.
AI cannot manage billing, security, user roles, or account deletion. Content made from your plan and proposed memories wait for your OK.
Outbound webhooks are signed so connected systems can verify events. Rate limits help protect platform and API endpoints from abuse.
Questions or concerns
If you’ve found a suspected vulnerability, send the details to security@unafi.io. Good-faith reports are welcome.
For information about personal data and AI processing, read our Privacy Policy, Data Processing Addendum, and AI Usage Policy.