Your data

What the Hub holds

Devices and bridges, message history, positions, routing rules, escalation chains, provider credentials and an audit log. All of it separated per account: devices, messages, positions, credentials and audit entries are never shared with another account.

Exporting it

GET /api/tenant/export returns a ZIP with one JSON file per table. Owner only.

Secrets are deliberately withheld and marked as redacted rather than exported: device keys, encrypted provider credentials and password hashes. An export you could hand to somebody else is not a backup worth having.

Closing the account

DELETE /api/tenant closes it. Owner only.

Access stops at once and the data is destroyed after 30 days. Until then the decision is reversible, which is the point: an account closed by mistake, or in an argument, can be brought back. After the grace period it is gone and cannot be recovered.

Audit log

Audit log (under Admin) shows security-relevant events as a hash chain, so an entry cannot be altered or removed without breaking the chain. Owners can verify the chain from the same page.