Built for agencies managing high-spend client ad accounts across 18 networks, with architectural safeguards enforcing read-only reporting, tenant isolation, and encrypted credentials.
Reporting connectors enforce strict read-only execution so daily sync jobs can never mutate client budgets, bids, or campaign states.
Every tenant record is scoped by agency_id at the query level, paired with role-based client visibility (Client::visibleTo) for team members.
Ad network OAuth refresh and access tokens are encrypted at rest, and accounts are protected with Time-based One-Time Password (2FA) and recovery codes.
Automated broken-link and landing-page checks resolve and block private/internal IP ranges to prevent Server-Side Request Forgery.
Agencies can disconnect OAuth tokens at any time or request complete workspace and personal data erasure under our Data Deletion Policy.
Role changes, workspace settings, and sensitive administrative actions are recorded in structured audit logs.