Legal
Security
Effective May 7, 2026. The security model is fail-closed: RLS isolates organizations, webhooks require verification, and private FXPM artifacts are sanitized before import.
Tenant isolation
Organization data is protected by Supabase RLS policies. Service-role operations are limited to trusted edge functions and audited admin actions.
Billing safety
PayPal-billed access activates only after a verified subscription webhook updates entitlement state. If verification fails, access falls back to Free. An operator may separately grant a plan directly with an audit trail, without creating a PayPal charge.
Artifact sanitization
Private FXPM engine configurations, parameters, and credentials are never published. Only sanitized summaries and band-level metadata are stored as artifacts.