Documentation · SecurityEvery protected request rechecks the boundary.
Identity, role, organization, and lifecycle state are validated again before sensitive data or actions are allowed.
7 min readUpdated Jul 22, 2026v1.0
Organization isolation
An identifier alone never authorizes access to another organization. Ownership is enforced by the API.
Separate sessions
Dashboard and Webmail use independent HttpOnly cookie sessions with distinct token scopes.
Abuse controls
Rate limits, retry policies, and cooldowns slow brute-force attempts while preserving safe recovery paths.
