Security
Designed to observe infrastructure, not customer data.
DatabaseMeter’s security boundaries start with server-side identity and ownership checks, then keep every credential and provider operation behind the application boundary.
Authentication and ownership
Auth0 establishes identity. DatabaseMeter maintains a local user record keyed by immutable Auth0 subject and checks ownership server-side for every user-specific resource.
Credential protection
Neon API credentials are validated server-side and encrypted with AES-256-GCM under a separately versioned environment key before persistence. Saved secrets are never returned to the browser.
No customer row collection
Normal monitoring is limited to provider metrics, catalogs, statistics, sizes, and activity metadata. Application table-row contents are outside the collection model.
Disconnect and delete
The schema is designed with intentional ownership cascades so account deletion can remove connections, projects, snapshots, settings, and associated history.
See the whole portfolio clearly.
Checking your secure session…