Security

Compliance-first by design: encrypted API tokens, no buyer personal data sent to AI, audit-logged live actions, server-side founder protection. Full security overview added in a later phase.