Security

Datpanel separates marketing, customer, and platform-admin surfaces. Customer data is scoped by organization; platform staff use mandatory TOTP, IP allowlists, and audit logging.

• Outbound-only agents — no inbound listener on customer VPS
• Ed25519-signed jobs; step-up authentication for destructive actions
• Monitoring probes use SSRF-safe URL resolution (no private-network targets)
• Webhook HMAC signatures and encrypted storage for integration secrets