Security & data protection
What we do today to protect your account and your team’s data. We update this page every time we add something.
Last updated: October 24, 2026What we do today
Encrypted connection
The website and the platform run over HTTPS.Email verification
Every new account verifies its email before getting started.Strong passwords
A strength meter whenever you create or change a password.Sessions in view
See where and when you signed in, and end any session you don’t recognize.Payments
Handled by an external payment gateway. We don’t store your full card details.Control in your hands
Roles
Admin, Manager, and User. Each role has its limits.Invitations
Add your team by invitation, and set each person’s role from the start.Audit logsBusiness & Enterprise
Who did what, and when.SSO and two-factor authenticationEnterprise
Your teams sign in the way you approve, with a second verification step.Client portalBusiness & Enterprise
Clients see only the projects your organization shares with them, and your Admin controls their access.Roles in your organization
AdminManages the organization, members, and billing.
ManagerManages projects, their teams, and tasks.
UserWorks on the tasks and projects they’re added to.
Certifications
Astra doesn’t currently hold a security certification or compliance accreditation. When we get one, we’ll announce it here, with the date.
Reporting a security issue
Spotted a vulnerability or anything unusual in Astra? Email hello@astraplatform.io with ‘Security issue’ in the subject. Tell us the steps that got you there, and please don’t test it on other people’s data.