EdgeCMS
Security that shows up in the product.
Built for design-partner pilots: clear access, accountable writes, private drafts — controls you can exercise in the product.
- Access
- Roles on every route, command and AI action. Default-deny checks on mutate paths.
- Change log
- Hash-chained command history you can export; optional webhook for SecOps.
- Delivery
- Public reads serve published content only. Drafts stay private.
- Privacy
- Workspace-scoped data; retention and DSAR seams for partner reviews.
- Encryption
- TLS in transit; Cloudflare encrypts D1, KV and R2 at rest.
- Process
- Reviewed pull requests, CI, and lockfile discipline on every change.
01Legal
Draft paperwork.
Terms, privacy policy, DPA and subprocessors are drafts awaiting a lawyer’s review. They are not in force.