How Your Workspace Data Is Protected.

Tenant Isolation

Every customer's data is separated at the database level by row-level security, not by application code remembering to filter. The application refuses to start unless it can demonstrate, against the live database, that a query scoped to one account cannot see another's rows.

Credentials

The token authorising access to your ClickUp workspace is encrypted at rest with a key unique to that connection, which is itself wrapped by our master key. We keep only the last four characters in readable form, so you can recognise which key is connected without that fragment being usable.

What We Write

Render changes a value in your workspace only where a rule you created tells it to, and each rule declares whether it may overwrite an existing value. Anything Render writes stays yours: ordinary ClickUp tasks, fields, comments and attachments that keep working whether or not you keep us.

Access And Audit

Administrative access is restricted by account flag, an email allowlist and an address allowlist, and every administrative action is recorded. Support access to an account is time-limited, banner-flagged, blocked from sensitive actions, and logged.

Home → Security