MalleableMalleable

Security & data handling

A workflow only works if you can trust it with real business data. For more, see our Trust Center or contact our team.

Compliance and the Trust Center

Malleable is SOC 2 Type II certified. Our Trust Center is the source of truth for security questions: it holds the SOC 2 report, the list of sub-processors, and the details behind how we handle your data. If your security team needs the report or has a questionnaire, start there. Live uptime is on the status page.

Integration credentials

Workflows connect to outside tools (Google, Slack, Asana, Notion, Microsoft Teams, and others) through OAuth. That means:

  • You grant access through the provider's own consent screen; Malleable stores the resulting token, not your password.
  • Each integration is scoped to a credential owner you choose: the workflow owner's account or the account of the person who started the run. The workflow diagram shows which is used where.
  • You can revoke access at any time from the provider's security settings.

Questions

For anything deeper, see the Trust Center or contact support.