Security and compliance posture
A practical overview of how Webiee Signal handles outbound controls, secrets and operational safety.
Manual send control
Emails are generated as drafts and can be gated by plan, score and approval state.
API key isolation
OpenAI, Apollo, Resend, Supabase service role and Stripe secrets stay server-side only.
Suppression support
Suppression list and unsubscribe handling are part of the outbound workflow.
Billing enforcement
Production actions can require an active Stripe subscription.
Operational logs
Run logs, provider health checks and admin metrics make failures visible.
Recommended next step
Before multi-customer production, complete organization-level tenancy and strict RLS isolation.