NexusSEO.ai
Security

Security and credential handling

How NexusSEO should separate platform services from customer-owned credentials.

Start Free View pricing

Credential model

Customer publishing and outreach credentials should be submitted through the application portal and used only for that customer workspace/site.

  • No shared customer CMS or mailbox secrets
  • Encrypted, backend-only mailbox tokens
  • Disconnect and retest controls
  • Clear setup status for each connection

Operational security

Platform services such as AI providers, Stripe, and SERP providers should be managed by the product owner in secure environment settings.

  • Keep provider keys out of frontend code
  • Use least-privilege tokens where possible
  • Log setup status without exposing secrets
  • Rotate keys when access changes