Enterprise-grade security

Security at SilverFox

Your data — and your clients' data — protected by architecture, not by promises. Here is exactly how we do it.

Tenant isolation & row-level security

Every record in SilverFox belongs to exactly one organization. Isolation is structural, not policy-based:

  • Every table carries an organization ID enforced by foreign keys — every query filters by it, on every request, with no exceptions
  • The active organization is resolved server-side from an httpOnly, secure cookie and re-validated against your actual membership on every call
  • Server functions never trust client-supplied organization or board identifiers — ownership is verified before any read or write
  • Cross-tenant access is rejected with 404, so resources belonging to other organizations are indistinguishable from ones that don't exist

Authentication & access control

Layered permissions from the organization down to individual fields:

  • Managed authentication (Netlify Identity/GoTrue) with hashed credentials, email verification and password recovery — we never store passwords
  • Organization roles (owner, admin, member) with per-app access controls managed by your admin
  • Board-level access (editor / viewer) per team member, enforced server-side on every operation
  • Field-level permissions per board role — hidden fields never leave the server, and edits to protected fields are rejected server-side

Encryption

Data is encrypted in transit and at rest:

  • TLS 1.2+ on every connection — browser, API and database
  • AES-256 encryption at rest for the database (Neon PostgreSQL)
  • Salesforce credentials are additionally encrypted at the application layer with AES-256-GCM (authenticated encryption) before touching the database
  • Signing and document links use cryptographically random, unguessable tokens (256 bits of entropy)

Salesforce integration security

The bridge between SilverFox and your Salesforce org is authenticated in both directions:

  • Outbound callbacks authenticate via OAuth 2.0 client credentials against your own Connected App — tokens are never persisted
  • Every callback payload is signed with HMAC-SHA256 so your org can verify it came from us and wasn't modified
  • Inbound requests require a per-organization API key, transmitted as a Bearer token over TLS
  • Salesforce sync can be disabled per board for data you want to keep exclusively in SilverFox

Audit trail

Complete accountability over what happens in your workspace:

  • Server-written audit log covering card changes, column moves, field edits (with before/after values), comments, attachments, membership and workflow rule changes
  • Entries record the actor, timestamp and affected record — including changes made through the Salesforce integration
  • Audit history is available to organization admins in-app and via authenticated API, filtered by date, user, event type and card

Infrastructure

Serverless architecture on audited cloud platforms:

  • Hosted on Netlify's global edge network with DDoS mitigation and automatic TLS certificate management
  • Database on Neon PostgreSQL with point-in-time recovery and automated backups
  • No servers of ours to patch — the platform providers (SOC 2 Type 2 audited) maintain the runtime
  • Secrets are write-only environment variables, never present in code, repositories or build logs

Development practices

Security is part of how we build, not an afterthought:

  • Server-side enforcement for every permission — the browser UI is a convenience, never the gatekeeper
  • Workflow rules (transition conditions) validate on the server so no client, including API integrations, can bypass them
  • Idempotent, reviewed database migrations with immediate verification
  • Dependency updates and platform patches applied continuously through the serverless model

Standards alignment

Our controls are designed around recognized industry frameworks:

  • OWASP application security practices: parameterized queries everywhere (no raw SQL from user input), authenticated encryption, secure cookie flags
  • Data-protection principles aligned with GDPR: your organization's data is yours, isolated, exportable and deletable on request
  • Infrastructure providers hold SOC 2 Type 2 and ISO 27001 attestations
  • Principle of least privilege applied from organization roles down to individual card fields

Responsible disclosure

Found a vulnerability? We want to know. Contact us at security@silver-fox.biz and we'll respond promptly. We ask that you give us reasonable time to remediate before public disclosure.

Questions about security?

We're happy to walk your team through our architecture in detail.