Security and privacy

• Workspace isolation. Every record belongs to exactly one workspace, and the database enforces it with row-level security on every query: a connection can only ever see its own workspace.
• Short-lived, scoped access. OAuth tokens last 15 minutes, are bound to Tandem's MCP server and one workspace, and carry only the scopes you approved. API keys are stored as hashes.
• Least privilege by default. Agents see only the tools their scopes allow. Approving suggestions, removing do-not-contact entries and workspace settings are for people only.
• Instant revocation. Disconnecting an app or revoking a key takes effect on its next call.
• Prompt-injection hygiene. Text from users and third parties is returned as { untrusted_content } so agents treat it as data.
• Full audit trail. Every write records who made it and on whose behalf.
• Your data stays yours. Export everything at any time; export or erase one person; delete the whole workspace. Tandem never asks for your other vendors' API keys: enrichment runs through your agent's own tools.