Partner programs that pass the security review
Controls your security team will ask about
SAML single sign-on
Connect your identity provider per email domain. We publish SP metadata for your IdP; the signing key is stored encrypted and never leaves the server.
Custom roles
Define your own permission sets from the platform's permission catalogue and assign them to members, on top of the built-in roles.
Tamper-evident audit log
Every authenticated change is appended to a hash-chained log per workspace. Verify the chain on demand to show nothing was edited or removed.
White-label to the core
Portals on your own domain with automatic TLS once DNS is verified, program email from your domain with DKIM, and partner-branded experiences.
Learn moreMCP servers
An operator server for AI tools working inside your program, and an integration server that lets a coding agent wire your product up with scoped keys.
Learn moreLive and test environments
API keys and OAuth clients are minted for live or test. Test traffic exercises the full loop and never reaches commissions or payouts.
Scoped machine credentials
API keys and OAuth2 client credentials carry an explicit permission subset, can never exceed the creator's own rights, and are shown once.
Tenant isolation
Partners only ever reach their own data; operators only their own program. Secrets are encrypted at rest and never returned to a client.
Agreed per contract
We would rather say this plainly than put a badge on it. These depend on your requirements, so we agree them with you.
Data residency
If you need your data kept in a specific region, talk to us about your requirements before you sign.
SLAs and support terms
Uptime and response commitments are agreed per contract. Tell us what you need and we will tell you what we can commit to.
Ready to run your partner program in one place?
Book a walkthrough and see recruitment, PRM, automation, payouts, CX, and dashboards working together — on one platform.