Glace

Security

Security posture for early Glace customers

Glace uses organization-scoped access, managed authentication, encrypted integration secret storage, and production checks to reduce operational risk.

Authentication and access

Dashboard and mobile access use Clerk-authenticated sessions. Application data is scoped to the active organization, and sensitive setup actions are reserved for admin or owner roles where supported.

Secrets and payments

Stripe and integration credentials are stored through backend-managed configuration flows. Workspace operators should rotate credentials if they suspect exposure and should avoid sharing API keys outside the dashboard setup flow.

Operational safeguards

The product includes typed backend functions, organization guardrails, webhook event records, invoice events, cleaner assignment state, and lead lifecycle events so important workflow changes can be reviewed.

Recommended launch controls

Before broad production rollout, each customer should confirm user access, connected integrations, payment configuration, backup exports, incident contacts, and expected support response paths.

These pages describe the current pilot product posture and are not a substitute for a signed customer agreement. Production customer agreements should be reviewed by counsel before broad launch.

← Back to Glace