Quick answer: Ask: where’s the tenant isolation enforced? Is there a password database? Can I export everything today? Is there a public status page? When was the last restore drill? Vendors with good answers volunteer them — Jogajog’s are in this article.
How it works
Isolation: database-engine row security, probed on every release. Passwords: none exist.
Exports: one click, all fields. Status: public, live-checked. Restores: drilled, counted, logged.
The uncomfortable questions are the point — buy from whoever answers all five in writing.
Frequently asked questions
What about penetration testing?
An external pen test gates the opening of public self-serve — the report summary is available to serious enterprise prospects.
Where do I report a vulnerability?
security@jogajog.app — responsible disclosure is respected and answered.