Trust & Status
Live signal from the BAZ Empire Marketing Hub. No marketing, just metrics.
Live status
Operational
Ping /api/health for JSON status. 200 = healthy.
Version
v1.0.0
Marketing Hub · 35 pages · 188 API routes · 56 lib modules · single Next.js process.
Security
- • HTTP-only session cookies · 30-day TTL · sameSite=lax
- • Bcrypt password hashing (10 rounds)
- • Per-workspace data isolation via
workspace_id - • Edge middleware enforces auth on all non-public routes
- • Public REST API (
/api/public/v1/*) is read-only and rate-friendly
Security contact: hello@bazempire.io · /.well-known/security.txt
Integrations
Live status of every wired provider:
/api/statusReturns which env keys are configured. Switches the live-vs-mock mode of every provider.
Data principles
- Sovereignty first. The hub runs on a single machine. Your data stays in a local SQLite file. No third party sees it unless you wire an integration.
- Multi-tenant by design. Every table has a
workspace_id. Users only see their own workspace's data. - Open formats. Export everything as CSV/JSON via
/api/export(authed). Move to any other tool whenever you want. - No dark patterns. No email-tracked pixels unless you turn them on. No third-party trackers. No surprise billing.
- Audit-trail. Every API mutation goes through a single wrapper that records user, workspace, IP, before/after diffs.
Compliance
- ✓ GDPR: data export + per-workspace deletion via
DELETE /api/workspace - ✓ SOC 2 Type II: in-progress (Q4 2026 target — single-tenant sovereign deployments eligible)
- ✓ CAN-SPAM: email outbox supports List-Unsubscribe + physical address
- ✓ CCPA: opt-out endpoints at
/api/consent
/api/health · /api/status · /site