Enterprise Security Policy
Last updated: August 15, 2026. Comprehensive overview of our multi-tenant security architecture and vulnerability disclosure program.
1. Infrastructure Security & Isolation
Manriq uses tenant-scoped access controls and role-based permissions to separate company workspaces. The specific infrastructure and storage configuration depends on the service environment.
2. Cryptography & Key Management
All database connections and application endpoints mandate TLS 1.3. Tenant secrets, SMTP passwords, and SMS API credentials are encrypted with AES-256 using envelope key management. Storage media files reside in private Cloudflare R2 object stores with time-limited signed URLs.
3. Vulnerability Disclosure & Bug Bounty
We welcome security researchers to test our public attack surfaces responsibly. Report potential vulnerabilities directly to security@manriq.com. We pledge to triage reports within 24 hours.