🛡️ Enterprise Trust & Architecture

Security by Design.
Zero Data Cross-Talk.

Tishtar was engineered with a strict privacy-first foundation. We minimize data intake, run on stateless autonomous containers, and ensure your intelligence routines remain strictly confidential.

⚡ Zero Persistent Scraping

Stateless Edge Execution

Target web pages are parsed in volatile worker RAM. After the cryptographic SHA-256 fingerprint is compared with the previous state snapshot, raw HTML is immediately purged. We never store copies of your scraped competitor pages.

🛡️ Granular Access

Least-Privilege OAuth Scopes

When connecting Google Sheets or Notion, Tishtar requests the absolute minimum permissions required to append structured rows. We have zero access to your Google Drive, Gmail, personal docs, or unshared Notion workspaces.

🔒 Strict Confidentiality

Zero Public AI Model Training

Your custom instructions, proprietary data sources, and analytical outputs are strictly confidential. We enforce enterprise API agreements guaranteeing that customer data is never used to train public foundation models.

🔑 End-to-End Integrity

AES-256 & HMAC Cryptography

Third-party OAuth refresh tokens and webhook secrets are encrypted at rest using AES-256-GCM. All outgoing webhooks include timestamped HMAC SHA-256 cryptographic signatures so your servers can verify message authenticity.

🗑️ GDPR & CCPA Compliant

1-Click Irreversible Data Purge

You maintain 100% data sovereignty. Delete any routine or wipe your entire account and API tokens with a single click. Deletion is instantaneous and cryptographically permanent across all edge databases.

Least-Privilege Isolation

OAuth Scopes: Exactly What We Can and Cannot Access

We never ask for broad permissions. Review our granular integration scopes below:

Service	Granted Scope	What We Do	What We CANNOT Do
Google Sheets	spreadsheets (selected document only)	Append new rows when a routine detects a price change or data alert.	Cannot read your Google Drive files, cannot view emails or photos.
Notion	Internal Integration Token (Specific Database)	Insert intelligence cards and structured database properties.	Cannot access private workspace pages or databases you did not share.
Telegram Bot	SendMessage via Bot API	Deliver real-time markdown notifications to your direct chat or channel.	Cannot read your personal Telegram messages or contacts.
Custom Webhooks	HTTPS POST Request (HMAC-SHA256 Signed)	Trigger downstream Zapier, Make, n8n, or proprietary backend flows.	Outbound only; does not receive or store incoming server credentials.

🌐 Global Ephemeral Runtime Sandboxing

Tishtar routines execute within isolated V8 runtimes deployed across a global edge network. Every task run is executed in its own ephemeral container that terminates immediately upon output dispatch. No routine shares runtime memory with another account.

🔒 Zero Knowledge & Financial Separation

Because Tishtar does not process direct payments, our systems hold zero credit card details, CVVs, or personal banking numbers. The Drop ledger is decoupled from your real-world identity, providing maximum privacy and zero risk of corporate financial data leaks.

Found a Security Vulnerability?

We encourage responsible security disclosures. Contact our core team at [email protected].

Report Disclosure →

Security by Design. Zero Data Cross-Talk.