Yes. WorkMA is GDPR-compliant and provides a one-click data export.

1. Go to Settings → Account.
2. Click Export My Data.
3. A JSON file containing your profile, activity log, sessions, and notifications will download.

Data retention: audit logs (365 days), notifications (90 days), activity logs (180 days), sessions (60 days).

WorkMA uses a schema-per-tenant isolation model. Each workspace has its own PostgreSQL schema, ensuring that data is physically separated at the database level.

What's shared: User accounts, billing, and platform notifications.

What's isolated: Tasks, teams, meetings, support tickets, code projects, files, merge requests, and all workspace data.

No cross-tenant data access is possible — even a database compromise exposes only one tenant.

The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

• Secrets are encrypted at rest (AES-256).
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Set up via Workspaces → Select Project → Settings → Vault.

Go to the Sign In page and click Forgot your password? Enter your email address and check your inbox for a reset link.

The reset link expires in 3 hours. If you don't receive the email, check your spam folder or contact support.

Once you click the link, enter a new password meeting the minimum requirements (8+ characters, mixed case, numbers).

The Sentinel AI automatically reviews merge requests for:

• Security vulnerabilities — SQL injection, XSS, hardcoded secrets.
• Code quality — complexity, duplication, naming conventions.
• Best practices — error handling, input validation, test coverage.

Findings are posted as PR comments and visible in the workspace dashboard. You can configure which rules are enabled in Admin → Sentinel Settings.