Built to keep every
organization's data separate.
DenwaysMeet is a multi-tenant product from the ground up - access control, session handling, and data isolation aren't features bolted on later, they're how every request is checked.
Proving who you are, properly
Argon2id password hashing
Passwords are hashed with Argon2id, the current recommended standard - never stored or logged in plain text.
Server-side sessions
Sessions are cookie-based and server-side with hashed tokens - nothing bearer-style that could be replayed if it leaked.
TOTP two-factor authentication
Enable an authenticator-app second factor from Settings → Security, on top of your password.
Real Google OAuth 2.0
Full PKCE flow with ID-token verification when Google sign-in is configured - not a simplified or partial implementation.
Nothing crosses organization lines
Full multi-tenant isolation
Every row in the database is scoped to its organization. One customer's data is never reachable from another's session.
Two-axis role-based access
Platform roles (for us, running the service) are entirely separate from organization roles, custom roles, and per-space/category/room overrides.
Overrides, not just roles
A room, category, or space can allow or deny any permission for a specific role on top of its base setting - denies always win, and the server enforces it, not just the UI.
Audit log
A searchable history of moderation and configuration changes for every organization, so you always know what changed and who changed it.
You control what you share, and can leave with it
Typed, sanitized errors
API errors are typed and sanitized before they reach the client - no stack traces or internal details ever leak out.
Card data never touches our server
Payment methods are entered directly into Stripe's own hosted fields inside our billing UI - card numbers never pass through DenwaysMeet's own server.
Export your data, anytime
Settings → Security → Export my data downloads a JSON file of your profile, organization memberships, and the messages you’ve sent.
Delete your account
Permanently anonymizes your profile, removes you from every organization you're a plain member of, and signs you out everywhere.
Dig deeper
Every part of our security, its own page
Found something?
If you've found a genuine security vulnerability, we want to know about it before anyone else does.
Contact usBring the whole conversation together.
Set up a workspace in a couple of minutes. Free for up to 5 members, no credit card required.