Security and privacy
Security and privacy
What the product does today, stated plainly. We do not list certifications here that we do not hold.
Product controls
Tenant isolation
Every tenant-owned table carries a tenant id and is protected by Postgres row-level security.
Multi-factor authentication
TOTP with backup codes for employees, partners and advertisers.
SSO
SAML and OIDC single sign-on with just-in-time provisioning, role mapping and required allowed domains.
Roles and permissions
A custom role and permission matrix, not a fixed set of roles.
API keys
Scoped keys that cannot be widened after creation, with IP allow-lists, expiry, rotation and rate limiting.
Sessions
Session management, account lockout and password reset flows.
Audit log
A filterable audit log of changes, available in the product and the API.
Retention
Raw-data retention is a per-tenant setting, and the data locker exports raw data to storage you control.
This website
- No third-party scripts, trackers, fonts or analytics, and no cookies.
- No requests leave your browser except to this site, apart from the demo form if you submit it.
- The demo form collects only the fields you type. It is not used to build advertising profiles.
Reporting a vulnerability
Email security@metrixed.com. Please include steps to reproduce and do not access data that is not yours.
Compliance attestations such as SOC 2 are not claimed on this page.
Security questionnaire?
Ask for our current security answers through the demo form.