Security
Your brands’ accounts, kept safe
Access to your social accounts is the most valuable thing a scheduler holds. Here’s how Robincast protects it.
Strong sign in
Passwords are hashed with Argon2id. Two factor authentication is available, and organization admins can require it. Sessions expire, and you can sign out of every device.
Encrypted platform access
Access tokens for your social accounts are encrypted at rest and never sent to your browser. You can disconnect an account at any time.
Isolation between organizations
Every request is checked on the server, and the database itself keeps each organization’s data separate. Automated tests try to cross that line on every route.
Safe uploads
Uploads are checked for their real file type and size and scanned for malware. Location data is removed from photos and videos.
Audit log
Connecting accounts, approvals, publishing and permission changes are recorded in a tamper evident log that admins can review and export.
Your data, your choice
Export your organization’s data, delete your account, or ask Facebook and Instagram to delete what we hold, at any time.
Found a vulnerability? Please report it privately to the Robincast team. We don’t run a bug bounty yet.
Secure by default
Every account starts with these protections switched on.
14-day free trial. No credit card needed.