Credential storage
3CX client secrets and passwords are encrypted at rest with a dedicated application key.
Home / Security
Security
Least drama. Encrypted secrets. Your org only.
Partners are handing us keys to customer phone systems. That is treated as a secret.
Preferred auth
Service principal / client credentials. Owner password is a fallback only.
Tenant isolation
Each MSP is its own organisation. Partner users cannot see another partner’s fleet.
Audit
Management actions are written to an audit log with the user, PBX, and action.
No shared stack
Kestrel does not share a database with other ZaheZone products. Payments go through a dedicated Stripe account.
Access roles
Billing is owner-only. Viewers cannot change systems.