Account boundary
Ident OAuth links the service to an active Ident.ink account. Account restrictions and session revocation are enforced separately from chat presentation.
SECURITY
Explicit boundaries around people, bots and data.
IdentChat publishes its operating controls so customers can understand what is protected, what they must configure and which external services remain dependencies.Permission boundary
Server, role and channel permissions limit actions. Administrative and moderation actions are recorded for review.
Bot boundary
Bots use dedicated tokens and scoped permissions. Human browser sessions are not accepted as bot credentials on the public bot API.
Media boundary
Users or server owners connect Cloudinary for new image storage. IdentChat does not promise that an external storage provider is operated by Ident.