How is my data protected?

Every tenant lives in its own isolated database schema, so your data is structurally separated from every other customer, not just filtered by a query. Channel credentials are stored encrypted, all traffic runs over TLS 1.2 or newer, two-factor authentication and role-based access control are built in, and every marketplace connection is a grant on your own account that you can revoke at any time.