{"slug":"security-and-governance/security","title":"Security in SpineWorkspace","section":"security-and-governance","sectionLabel":"Security & Governance","status":"unclassified","type":"document","path":"security-and-governance/security.mdx","bytes":973,"description":"SpineWorkspace is built for enterprise security: identity through One Auth, scoped connections, capability-level authorization, and full audit trails.","updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\nSpineWorkspace is built for enterprise security. Every user reaches connected systems through One Auth, every action runs as a scoped capability, and every write produces a receipt for audit.\n\n## The Security Foundation\n\n- **Identity** — One Auth for people, delegated identity for Twin and agents.\n- **Scoping** — connectors and capabilities declare exactly what they can touch.\n- **Authorization** — policies gate every action before execution.\n- **Auditability** — receipts capture what happened, when, and where it wrote.\n\n## Related\n\n- [One Auth](/platform/one-auth)\n- [Permissions](/security-and-governance/permissions)\n- [Governance](/security-and-governance/governance)\n- [Compliance](/security-and-governance/compliance)"}