DocsIdentitySecurity and Data Handling

Security and Data Handling

How to think about Identity as a sensitive system that stores onboarding and verification evidence.

Baseline expectations

  • treat raw identity artifacts as high-sensitivity data
  • limit console access to operators who actually need it
  • secure webhook endpoints and signing secrets
  • separate customer-facing verification surfaces from operator workflows

Boundary with WatchTower

When your organization also uses WatchTower, pass only investigation-safe summaries across the integration boundary. Identity remains the system your operators use for evidence.