Trust
Security
How Canu protects credentials and data.
Connections use OAuth wherever supported. Credentials are encrypted at rest, isolated per company, and never placed in model context.
- TLS in transit, encryption at rest
- Per-company data isolation enforced at the database layer
- Secrets stored in a managed vault, never in application code
- Append-only audit history for every agent action
Full detail lives on the Canu security page.