Designed for least privilege
InstaSLA is designed to request only the access needed to sync GitHub security alert metadata and run SLA workflows.
Trust
Security
How InstaSLA protects authentication, tokens, customer data, and evidence workflows.
Secrets stay out of exports and logs
The product design avoids exposing GitHub tokens, payment secrets, email API keys, environment variables, or private code in UI, logs, analytics, email, MCP responses, or exports.
Auditability is part of the workflow
Ownership changes, SLA updates, risk acceptance, notification delivery, and administrative actions are designed to be recorded for review.