Security
Tenant-scoped approval requests
Approval listings and API-key decisions are scoped by tenant on the backend.
Signed approval links
Email and SMS approval links are verified by the API before a decision is recorded.
SMS consent enforcement
SMS approvers require an active consent contact before approval messages are sent.