security
security at alana
alana is infrastructure for your catalog, so protecting it and keeping it available is the job. here is how the platform is built and operated.
data protection
- encrypted in transit with tls, hsts enforced site-wide
- encrypted at rest on managed postgres
- row-level security isolates every workspace’s data
- media served from access-controlled storage via signed urls
access & identity
- authentication via auth0: sso/saml, scim provisioning, passwordless, mfa
- role-based access with a strict owner / admin / member / viewer hierarchy
- least-privilege service credentials, scoped per operation
- sessions backed by redis, revocable on demand
infrastructure & reliability
- hosted on vercel behind cloudflare
- datadog apm, error tracking, and database monitoring across the stack
- health and readiness checks with automated alerting
- structured json logging with correlation ids, never pii or secrets
your data, your control
- opt-in per catalog: nothing is published without an explicit commit
- you control exactly what is exposed to ai surfaces
- export or delete your data on request
- no training of third-party models on your catalog
compliance & privacy
built to meet enterprise requirements
the platform is operated with gdpr-aligned data practices, continuous monitoring and a documented incident-response process (datadog), and a public status page. running a security review or filling a questionnaire? request our security documentation and we’ll walk you through our controls, subprocessors, and data-processing terms.
ready to make your catalog shoppable by ai?
start with a free ai commerce score and see exactly how ai assistants see your products.