Sentinel runs a local credential and security-pattern scan on merge request diffs. It looks for common credential markers and high-risk patterns, then records a security flag and confidence score on the request.

It is a fast first-pass check, not a model-backed AI code review. Human review, testing and security assessment are still required before merging.

The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

• Secrets are encrypted at rest (AES-256).
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Set up via Workspaces → Select Project → Settings → Vault.

WorkMA uses a schema-per-tenant isolation model. Each workspace has its own PostgreSQL schema, ensuring that data is physically separated at the database level.

What's shared: User accounts, billing, and platform notifications.

What's isolated: Tasks, teams, meetings, support tickets, code projects, files, merge requests, and all workspace data.

No cross-tenant data access is possible — even a database compromise exposes only one tenant.

Yes. WorkMA is GDPR-compliant and provides a one-click data export.

1. Go to Settings → Account.
2. Click Export My Data.
3. A JSON file containing your profile, activity log, sessions, and notifications will download.

Data retention: audit logs (365 days), notifications (90 days), activity logs (180 days), sessions (60 days).

Go to the Sign In page and click Forgot your password? Enter your email address and check your inbox for a reset link.

The reset link expires in 3 hours. If you don't receive the email, check your spam folder or contact support.

Once you click the link, enter a new password meeting the minimum requirements (8+ characters, mixed case, numbers).