Security and permissions

Knot Tools™ targets self-hosted deployment: your ERP data and secrets stay on your infrastructure.

🔐 Topics covered

Topic	Guide
User rights and multi-entity	Dolibarr permissions
Secrets and encryption	Credentials and secrets

🔐 Principles

• No plain secrets in exported workflows.
• Simulate before exposing a public webhook.
• GDPR: you remain data controller on your Dolibarr; Knot does not require an editor cloud.

For developer security docs (SSRF, CodeNode sandbox), see core/docs/security.md in the Knot Core repository.