Access Control
Zynnode limits access to production systems and customer infrastructure data to authorized personnel and service processes. We use role-based access patterns and review sensitive operational access as the platform evolves.
- Cloud provider connections are scoped to the deployment workflows they support.
- Sensitive operational actions are designed to require authenticated account access.
- Team and workspace permissions are separated from personal project access.
Data Protection
We protect data in transit and at rest using standard cloud security controls. Credentials and provider tokens are handled as sensitive data and are never intentionally stored in plain text.
- Traffic is served over HTTPS.
- Secrets are stored separately from regular project metadata.
- Logs and diagnostics are treated as operational data and should not be used for passwords or private keys.
Infrastructure Security
The platform is built on managed cloud infrastructure with network controls, deployment isolation, and regular dependency maintenance. We keep the deployment surface narrow and prefer provider-native controls where practical.
Monitoring and Auditability
Important deployment and account events are captured so teams can understand what changed and when. We use this information to support account security, reliability, and customer support investigations.
Responsible Disclosure
If you believe you have found a security issue, contact security@zynnode.com with enough detail for us to reproduce and assess it. Please avoid accessing customer data, disrupting service, or testing against accounts you do not own.