Tenant isolation
Row-Level Security and brand-scoped permissions protect customer-readable data.
Security and control
Automation should reduce work, not remove accountability.
PostMy.Social is designed around tenant isolation, encrypted credentials, exact-version approvals and recoverable publishing operations.
Controls built into the architecture
Encrypted credentials
Publishing credentials are authenticated, encrypted and separated from customer-readable connection records.
Versioned approval
Approval applies to the exact saved content version. Editing clears prior approval.
Safe publishing jobs
Leases, bounded retries and uncertain-state handling reduce duplicate external writes.
Least privilege
Organisation and brand roles separate viewing, editing, approval, settings and connection access.
Audit history
Material approvals, policy changes and connection actions leave an attributable record.
Responsible automation
Customers stay in control.
Connections use provider authorisation flows where available. Customers can revoke access and important actions remain subject to their policies.
- No password collection for social OAuth
- Dedicated WordPress Application Password recommended
- Explicit destination selection
- Sensitive response approval
- Provider revocation and disconnection support
- No sale of connected account content
AnalyseRecommendCreatePublishMeasureImprove