Security
Security at AirNLP
Multi-tenant isolation, scoped devices, and least-privilege access run through everything we build.
Last updated: July 2026
Tenant isolation
Data lives in Postgres with row-level security enforced per tenant. Cross-tenant reads are blocked at the database layer, not just application code.
Devices and access
Physical devices (like HOWI kiosks) pair with a scoped key tied to one environment and can be revoked instantly. Admin surfaces require explicit authorization.
Reporting an issue
Found a vulnerability? Tell us through the contact page — we review every report and respond promptly.