Security

Last updated: July 26, 2026

The-Snip is a multi-tenant service that both people and their agents write to, so the controls below are the ones that matter most: keeping one workspace's content out of another, protecting the keys that agents authenticate with, and making sure nothing an agent writes becomes canon without a human. This page states only what is actually in place today.

Workspace isolation

Every workspace is isolated in PostgreSQL itself. Row-level security is forced on all 14 tenant tables, with 22 policies keyed to a workspace setting that is applied per request. Isolation is enforced by the database, not by application WHERE clauses — the app, the REST API and the MCP server all go through the same scoped path, so no one surface can be the one that forgets.

It fails closed

The application connects to the database as a non-superuser role that is not permitted to bypass row-level security. That is the difference between a policy and a guarantee: if application code has a bug, the query returns nothing rather than another tenant's rows.

API keys

Workspace API keys are hashed at rest with SHA-256 — we store the hash, never the key. The full key is shown exactly once, at creation, and cannot be retrieved afterwards. Any key can be revoked at any time, and a revoked key stops working immediately.

Agent writes are review-gated

An agent can never publish approved content on its own. Anything an agent creates or updates — over REST or over MCP — lands in the review queue regardless of what it asked for, and a human approves what becomes canon.

Audit log

Every change to an item is recorded in that workspace's own audit log, on the same database transaction as the change itself: what changed, whether a person or an agent did it, which key or account it was, which surface it arrived on, and the status it moved to. A change cannot exist without its audit record.

Backups

The database is backed up nightly, and the backups are pulled off the production host to separate infrastructure so that losing the host does not lose the backups. They are kept for 30 days. The restore path has been tested, not just written down.

Transport

Every connection is served over TLS, with certificates provisioned and renewed automatically.

Getting your data out

Your content is exportable from the app, without asking us: docs as .md on every plan, and full Markdown and JSON export of the whole base on paid plans.

Who operates The-Snip

The-Snip is operated by InfoDriven, Sharjah, United Arab Emirates. Reach us at support@infodriven.ae.

Contact

For security questions, or to report something you have found, email support@infodriven.ae.