Security Overview

Ennea uses authenticated API access, role-based permissions, tenant scoping, rate limits, secure headers, input sanitization, and restricted media delivery patterns to protect customer environments.

Production deployments should use secure cookies, HTTPS, strong JWT secrets, least-privilege provider credentials, monitored infrastructure, and documented backup and incident response procedures.

Customers should assign least-privilege roles, remove users promptly, protect shop-floor devices, review AI-generated suggestions, and ensure integrations use scoped credentials.

Security questions and responsible disclosure reports can be sent to security@ennea-ai.com.