Trust

Platform security

Defence-in-depth controls for the Annuvell gateway and its ecosystem integration boundary.

Keycloak single sign-on

Tenant-scoped data access

Role-gated administration

Signed ecosystem webhooks

Rate-limited sensitive APIs

Structured audit and correlation IDs

CSP, HSTS, and defensive browser headers

Externalized secrets

Report suspected vulnerabilities through Annuvell’s approved private security contact. Do not disclose sensitive findings publicly.