Security at Thivi

• Two-Factor Authentication (TOTP) with recovery codes
• Role-based access control with granular permissions
• Workspace isolation
• Encrypted API key storage
• GDPR compliant