Secure by default
Credentials are encrypted at rest and never leave the server. Connections use TLS by default, self-signed certificates must be allowed explicitly, and DataSquares only runs read queries against your sources.
- Secrets are never prefilled when a connection is edited
- An SFTP source can pin its server’s host key
- Webhook triggers are signed, time-boxed and accepted once