Security at Adwire
Adwire is built for revenue-critical workflows. Security is a daily engineering practice, not a checklist.
Authentication
Email + password with leaked-password protection enabled. Optional Google sign-in. Session tokens are httpOnly and rotated automatically.
Encryption
All traffic is served over TLS 1.2+. Data is encrypted at rest using AES-256 at the database and storage layers.
Access controls
Workspace data is isolated through row-level security policies enforced at the database. Every query carries the authenticated user's identity — there is no shared admin pool.
Storage security
Uploaded assets (media kits, contracts, invoices) are scoped to the workspace and accessed through short-lived signed URLs.
Secrets
Integration credentials (Beehiiv, Kit, Mailchimp, Google Analytics, Stripe) are encrypted using AES-256-GCM with a per-environment master key. Decryption only happens inside server functions, never in the browser.
Monitoring
We log all authentication events, role changes, billing changes and admin impersonation actions. Anomalies are reviewed weekly.
Everything you need to evaluate Adwire
Security or compliance question?
Our team responds to security questionnaires, GDPR and PIPEDA requests.