New: Human approval queues now show every capability decision. See how it works

Trust centre

Security is part of the product boundary

Encryption, least privilege, tenant-scoped queries, audit trails and careful delivery shape how Outrena is built.

Tenant isolation

Every server query and change is scoped to the signed-in workspace and checked against the member's role. Isolation is tested independently of the interface.

Encryption

All traffic uses HTTPS. Mailbox passwords and webhook secrets are encrypted before they are stored and are never sent back to the browser.

Sign-in

Accounts are created through LinkedIn sign-in, validated with signed ID tokens, state, nonce and PKCE. LinkedIn access tokens are not kept after sign-in.

No unauthorised automation

Outrena never scrapes, drives a browser, replays session cookies or uses private platform APIs. Actions that a platform does not permit through an approved API become human tasks.