Yes. WorkMA is GDPR-compliant and provides a one-click data export.

1. Go to Settings → Account.
2. Click Export My Data.
3. A JSON file containing your profile, activity log, sessions, and notifications will download.

Data retention: audit logs (365 days), notifications (90 days), activity logs (180 days), sessions (60 days).

WorkMA uses a schema-per-tenant isolation model. Each workspace has its own PostgreSQL schema, ensuring that data is physically separated at the database level.

What's shared: User accounts, billing, and platform notifications.

What's isolated: Tasks, teams, meetings, support tickets, code projects, files, merge requests, and all workspace data.

No cross-tenant data access is possible — even a database compromise exposes only one tenant.

Go to the Sign In page and click Forgot your password? Enter your email address and check your inbox for a reset link.

The reset link expires in 3 hours. If you don't receive the email, check your spam folder or contact support.

Once you click the link, enter a new password meeting the minimum requirements (8+ characters, mixed case, numbers).

The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

• Secrets are encrypted at rest (AES-256).
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Set up via Workspaces → Select Project → Settings → Vault.

The Sentinel AI automatically reviews merge requests for:

• Security vulnerabilities — SQL injection, XSS, hardcoded secrets.
• Code quality — complexity, duplication, naming conventions.
• Best practices — error handling, input validation, test coverage.

Findings are posted as PR comments and visible in the workspace dashboard. You can configure which rules are enabled in Admin → Sentinel Settings.