Start free

Security

Built for product teams that care where their data sleeps

Kintry runs on our own servers in Germany, on Next.js (App Router) with Postgres and row-level security. Every row is workspace-scoped. Every administrative action is audited. Your data is exportable on demand.

What Kintry is

Kintry is a product operating system. It connects discovery, delivery, roadmap, cited intelligence, and stakeholder reporting in one workspace.

Data isolation

  • Row-level security on every table. The Postgres engine enforces workspace scoping; application code cannot widen the boundary.
  • Per-request authenticated clients. User-facing reads and writes use a short-lived session-scoped Postgres connection, never the service role.
  • Workspace-scoped machine clients. The public API auto-injects the current workspace id on every read and write, so a missed filter cannot leak across tenants.

Encryption & secrets

  • TLS in transit, terminated by Cloudflare and again at our origin. Provider keys and other stored secrets are encrypted with a per-workspace key.
  • Workspace AI keys are encrypted with per-workspace keys; provider secrets never leave the server.
  • Personal access tokens are hashed; only prefixes are persisted for display.

HTTP hardening

  • HSTS, X-Content-Type-Options: nosniff, restrictive Referrer-Policy.
  • Conservative Content-Security-Policy with allowlisted upstream hosts.
  • Attachments served as binary downloads with a safe MIME allowlist.
  • Cron endpoints require a server-only shared secret, compared in constant time. The routes that authenticate with the public key are rate-limited as well.
  • Outbound reporting webhooks are signed with a per-workspace secret.

Audit, sessions, and exports

  • Audit log for every administrative action, with stable codes for downstream tooling.
  • Active sessions page; admins can revoke any member's sessions.
  • Workspace export (/api/v1/workspace/export) returns a JSON or CSV snapshot, including a capped slice of audit events.
  • Account deletion removes profile + memberships and revokes tokens.

Sub-processors

  • Hetzner Online GmbH: server hosting and backups, in Germany
  • Cloudflare: DNS, TLS, and access control
  • Lovable AI Gateway: embeddings
  • OpenRouter: language model inference
  • Resend: transactional email
  • Firecrawl: web search, when that feature is enabled
  • GitHub and GitLab: only when a customer connects a repository
  • PostHog: product analytics and session replay
  • Sentry: error monitoring, in its EU region

Reporting a vulnerability

Email [email protected] with a description and reproduction. We respond within two business days. See also our privacy notice and data processing terms.