Security

AI Ops OS is designed to keep setup, billing, and lead capture practical and controlled for small businesses.

Transport Security

The production website uses HTTPS. The app is served behind Nginx Proxy Manager with an active TLS certificate.

Billing

Card payments are processed by Paddle. AI Ops OS does not store customer card numbers.

Workspace Access

Returning workspace access uses a generated access code. Access codes are stored as hashes, not plain text.

Webhook Verification

Paddle billing events are accepted only when the Paddle signature matches the configured endpoint secret.

Lead Data

Lead records are stored on the AI Ops OS server and can be exported by the workspace owner.