Security at MultiPost Studio
How we protect your accounts, your content and your customers' conversations.
Encryption everywhere
TLS in transit, encryption at rest. Platform tokens are stored encrypted and scoped per workspace.
Access control
Org and workspace roles with a real permission matrix. SSO and SCIM on Enterprise.
Audit trail
An immutable log of security- and billing-sensitive actions, exportable on Enterprise.
Isolation
Every workspace's data is queried with a workspace filter. No cross-tenant reads.
Least privilege
Team members get the minimum access their role needs; consequential actions ask first.
Responsible disclosure
Found something? Email [email protected]. We respond within one business day.
Compliance
A signable DPA and a list of sub-processors are available for Team and Enterprise customers — request them here.
Security questions
Do you see or store my social passwords?
No. You approve access on each network's own login screen and we receive an access token, never your password. Tokens are stored encrypted and scoped to your workspace.
How do I secure my own account?
Turn on two-factor sign-in with an authenticator app in Settings → Security, and review the devices signed in to your account, revoking any you don't recognise. You can sign in with email and password or with Google.
Do you support single sign-on (SSO) or SCIM?
Sign-in today is email and password or Google, with optional two-factor. SSO and SCIM provisioning are Enterprise-plan requirements that we scope with you directly, so please ask us about your identity provider before relying on it.
Is one workspace's data visible to another?
No. Data is queried per workspace, and each client workspace is isolated from the others.
How do I get a copy of my data or have it deleted?
Settings → Privacy & Data lets you request a copy, a correction or deletion. Each request is tracked until it is resolved. You can also raise a complaint from the same page.
Do you have a data processing agreement?
Yes. Our Data Processing Addendum, privacy policy and India DPDP notice are published on the site, and you can ask us for a signed copy.
Is my content used to train AI models?
No. We don't train models on your content. Brand Brain is per-workspace context used only to shape your own generations. Your text goes to the AI provider only to produce the result you asked for, and with your own key that is your account with that provider.
I found a security problem. Who do I tell?
Email [email protected] directly and we'll respond promptly. The security page has the details.
Still have a question? Browse all FAQs or ask us.
Ready to find your MultiPost Studio?
Free to start. Connect your platforms, import your calendar, and let the AI do the heavy lifting.
Free forever plan · No credit card required