How does TofuPilot secure my test data and access?

Data is encrypted in transit and at rest. Access is controlled by role-based permissions and scoped API keys, and two-factor authentication supports passkeys (WebAuthn) and authenticator apps (TOTP). TofuPilot SA is Swiss-incorporated, so your data sits outside the reach of US surveillance law such as the CLOUD Act. Teams needing full control can self-host.