Access principles
- Scoped — least-privilege role for what we need to do
- Time-limited — every token has an expiry, never longer than the project duration
- Audited — actions taken under our access are logged on your side
- Revocable — you can pull access at any time without breaking the project
How we receive credentials
Through your password manager's secure share (1Password, Bitwarden), or your platform's invitation flow (Github, Cloudflare, Figma). Never over email, never over chat as plain text.
What we never ask for
- Your personal account passwords
- Root credentials when an admin role exists
- Recovery codes (we keep our own MFA)
- Production database access for any reason except a written, scoped data migration task