Trust
Security
Miyara connects a brand's email and runs its revenue, so security is the floor, not a feature. Here is the posture, stated plainly. We will not claim a certification we have not earned.
On this page
Hosting and infrastructureEncryptionMulti-tenant isolationSingle-purpose linksSOC 2Reporting an issueHosting and infrastructure
Miyara runs on AWS. Data is stored in managed, access-controlled services. Backups are automated and encrypted.
Encryption
Data is encrypted in transit with TLS and at rest with AES-256. Connected inbox tokens are stored encrypted and scoped to the minimum access the channel needs.
Multi-tenant isolation
Every query is scoped to a single brand workspace. One brand can never read another brand's deals, buyers, catalog, or documents.
Single-purpose links
The links Miyara sends to ops, finance, and logistics answer one question and grant no access to anything else in the account. They expire and carry no session.
SOC 2
Miyara is working toward SOC 2 Type II certification. Certification has not yet been completed, so Miyara does not display a SOC 2 badge or claim certification.
Reporting an issue
Security reports go to talha@miyara.app. We respond to credible reports promptly and will keep you informed through resolution.
Plain-language overview