# Security and privacy

- **Workspace isolation.** Every record belongs to exactly one workspace, and the database enforces it with row-level security on every query: a connection can only ever see its own workspace.
- **Short-lived, scoped access.** OAuth tokens last 15 minutes, are bound to Tandem's MCP server and one workspace, and carry only the scopes you approved. API keys are stored as hashes.
- **Least privilege by default.** Agents see only the tools their scopes allow. Approving suggestions, removing do-not-contact entries and workspace settings are for people only.
- **Instant revocation.** Disconnecting an app or revoking a key takes effect on its next call.
- **Prompt-injection hygiene.** Text from users and third parties is returned as `{ untrusted_content }` so agents treat it as data.
- **Full audit trail.** Every write records who made it and on whose behalf.
- **Your data stays yours.** Export everything at any time; export or erase one person; delete the whole workspace. Tandem never asks for your other vendors' API keys: enrichment runs through your agent's own tools.