Security

We protect your account, your data and every action Trigvanta takes for you — from login to publishing.

We monitor account activity for signs of risk and can pause suspicious actions automatically.

Owners, admins and root must set up two-factor login — it cannot be turned off.

What a person can do depends on their role, and every action is checked against the right workspace — no cross-account access.

Your data is stored in a private database. Larger files, such as generated content, are kept in private storage that is never publicly accessible.

Passwords, two-factor secrets and connected accounts (such as your WordPress or Search Console access) are encrypted, each with its own key.

Files are not public by default. Access is granted via short-lived, one-time links — not open URLs.

Every sensitive action — who did what, and when — is written to an audit log.

Unusual or risky activity can automatically pause or block an action before it runs.

Actions that affect things outside Trigvanta (such as publishing to your site) require your approval unless you explicitly enable full automation for that rule.

We take regular backups so the platform can recover from an outage without losing your data.

We show the real, current status of every connected provider — if something is not connected or not working we say so instead of hiding it.

If a security incident occurs we have a documented process to contain it, fix it and inform those affected.

support@trigvanta.com