Security

# Security built in, not bolted on

Least-privilege tokens, signed webhooks, and a hardened render path by default.

## Our practices

-   Read and write tokens are scoped and never shipped to the client
-   Publish webhooks are verified with a shared secret
-   Draft content is only served in draft mode

## Security questions

Where is content stored?+

In Sanity Content Lake, with regional options.

Do you support SSO?+

Yes, through Sanity's organisation settings.

Get started

## Ship your next page without a ticket

Compose marketing pages from structured blocks, preview them live, and publish in seconds. Your engineers own the design system; your team owns the words.

[Talk to us](/contact)

![Composing a page](https://cdn.sanity.io/images/f9tyxuia/production/d795ac53db7536bff81d75c510fd32fb6eaf49aa-1600x900.svg)