Security

Your business deserves
clear boundaries.

Your marketing workspace holds customer information, content, and connected accounts. Separation, permissions, and a record of activity are part of how Unafi handles that responsibility.

How the platform is built

Protection in the everyday work.

01

Separate workspaces

Workspace data is scoped to its own account. Agencies keep each client’s contacts, content, and connections in a separate workspace.

02

Protected credentials

Connected-channel credentials and API keys are encrypted at rest. Saved secrets are used by integrations without being shown again in plain text.

03

Controlled access

Roles and permissions govern what team members can do. Accounts support two-factor authentication, and API keys carry explicit scopes.

04

Activity you can trace

An activity history records work by people and AI, including the approvals behind it.

05

Human approval

AI cannot manage billing, security, user roles, or account deletion. Content made from your plan and proposed memories wait for your OK.

06

Verified connections

Outbound webhooks are signed so connected systems can verify events. Rate limits help protect platform and API endpoints from abuse.

Questions or concerns

Talk to the team.

If you’ve found a suspected vulnerability, send the details to security@unafi.io. Good-faith reports are welcome.

For information about personal data and AI processing, read our Privacy Policy, Data Processing Addendum, and AI Usage Policy.