Tenant isolation
Authenticated requests use verified user identity, while PostgreSQL row-level security independently enforces workspace and business access.
Security at Zenvik
Security designed into content operations
Learn how Zenvik separates tenants, protects private media and limits elevated publishing access.
Start with ZenvikPrivate media
Original files remain in private object storage and are accessed through short-lived signed URLs.
Publishing boundary
Elevated worker credentials stay in a server-only client and are never used for ordinary application requests.
What teams ask about security at zenvik.
Does switching business context grant access?
No. Business selection is a user-interface preference. Every data operation is authorized independently.
Are provider credentials exposed to the browser?
No. The credential model stores encrypted values in a private database schema without browser grants.