Security
We take security seriously. Here's how Memgen protects your data.
Data Isolation
Each project has its own vector collection and all database queries are scoped by project. Multi-tenant architecture ensures complete data separation.
API Key Security
API keys are hashed using bcrypt before storage. Raw keys are shown only once at creation time and never stored in plain text.
JWT Authentication
Dashboard access uses short-lived JWT tokens with secure secret keys. Tokens are validated on every request.
Audit Logging
Every memory operation and administrative action is logged with timestamps, actor information, and payload details.
Webhook Verification
Webhook payloads can be signed with a secret for request verification, ensuring only legitimate events are processed.
Self-hosted Option
Deploy Memgen on your own infrastructure for complete control over your data. No data ever leaves your network.