Read-only by design
The ConnectWise connector is read-only by design. There is no write path: no rule edits, no disabling, no deletion, and no automatic remediation.
Read-only audit security
Security controls for RuleCerta’s read-only workflow audit service.
Least privilege, least data
Connections request only the configuration required for the audit and expect least-privilege read credentials.
Connector secrets
Connector credentials are encrypted server-side. Secrets are never returned to the browser, never written to application logs, never sent to AI providers, and never attached to support tickets.
Tenant isolation
Workspace and environment data are restricted to authorised members through server-side authorisation and database access controls. Direct browser table writes are denied.
AI boundaries
Customer data is not used to train models.
Account control
Workspace archive and restore, membership and invitations, and disconnecting a connector with credential wipe are available in the product. Deletion requests are handled through privacy@rulecerta.com after verification.
Responsible disclosure
If you believe you found a security vulnerability in RuleCerta, email security@rulecerta.com. Give us a reasonable time to investigate before public disclosure.
- Describe impact and reproduction steps clearly.
- Do not access customer data, destroy data, or disrupt service beyond what is needed to validate the issue.
- Do not include passwords, connector secrets, or unrelated personal data in your report.
security@rulecerta.com
Email security@Machine-readable contact also published at /.well-known/security.txt