Security & data handling

Customer data stays on the customer identity plane.

Customer text never enters the subnet and is never used to train models.
Customer text is never sent to a third-party model API.
Every product resource is organization scoped from the first migration.
Raw API keys are displayed once, HMAC-hashed at rest, and revocable.
OAuth credentials are runtime secrets and are not committed or logged.