Platform
Security
Enterprise-grade protection
Workel is built with security as a core principle. Data is encrypted at rest and in transit, access is controlled by policies on every endpoint, and infrastructure runs on Microsoft Azure.
How your data is protected
EncryptionAES-256 at rest, TLS 1.3 in transit for all data
InfrastructureMicrosoft Azure App Service with automatic scaling and high availability
AuthenticationLaravel Sanctum tokens, Google OAuth SSO, bcrypt password hashing
AuthorizationPolicy-based access control on all 124+ API endpoints
Broadcast authReal-time WebSocket channels authenticated per user and resource
Rate limitingAPI endpoints rate-limited to prevent abuse (login, refresh, AI, uploads)
Key VaultSecrets stored in Azure Key Vault, never in code or environment files
HMAC verificationWebhook signatures verified for Stripe and Brevo integrations