Your data is a trust: how Onyx protects your agency's numbers
Workspace isolation enforced inside the database itself, secrets encrypted at rest, fine-grained permissions that fail closed, and automatic daily backups.
An agency doesn't just hold its own numbers — it holds its clients' and creators' too, and that is a trust before it is data. So security in Onyx is built into the foundations, not layered on top.
Isolation the database itself enforces
Every workspace is isolated from the others at the database level, not just in application code. Even if a line of code slips, the database stands as a barrier against one agency's data leaking into another's.
Encryption and secure connections
Access tokens and secrets are encrypted at rest, and all traffic is HTTPS-only. Permissions are fine-grained and fail closed: a new member sees only what they were explicitly granted, and every agency can shape roles as it wishes.
And backups that depend on nobody
Backups run daily and automatically. No one has to remember, no button has to be pressed — because a disaster plan that requires a human is not a plan.