GatherowEncrypted connection settings
Saved source URLs and authentication values are encrypted on the server with authenticated AES-256-GCM encryption. Source inspection does not return the saved credentials.
Security & data handling
Clear controls.
Deliberate access.
Your connections, workspace roles and published fields serve different purposes. Here is how Gatherow keeps those boundaries visible.
Keys for read-only APIs
API keys are stored as hashes. Owners choose endpoint access and expiry, and can revoke a key. Published endpoints expose the configured result fields, not source credentials or internal evidence.
Workspace access
Owner, editor and viewer roles separate administration, editing and inspection. Data queries are scoped to the workspace. Passwords are hashed and sessions use HTTP-only cookies.
Checked URL collection
Imports use public HTTPS, validate network destinations and restrict redirects. Private and local addresses are blocked. Cross-origin redirects do not retain authentication headers.
Optional AI drafting
A little help with structure.
You stay in charge.
Gatherow uses OpenAI GPT-5 nano to draft supported table and API configurations. The model receives your request, selected field names and types, and supported configuration structure.
Collected rows, source URLs and connection credentials are excluded. Existing saved filter values are represented by references. Do not include sensitive values in your written request.
See the review workflowSent for the AI draft
- Your written request
- Field names and types
- Supported configuration and matching structure
Kept out of the model input
- Collected source rows and example values
- Connection URLs and credentials
- Existing saved filter literals
Check, then apply.
AI output is validated against supported operations and your workspace’s fields. Gatherow calculates the preview locally. Applying a draft, saving a table and publishing an endpoint remain explicit actions.
Regular API requests, scheduled collection and table rebuilding do not invoke AI. AI availability also depends on the service configuration and workspace allowance.
Practical account care.
Save your one-time recovery code privately. Account email ownership is not verified, and recovery does not send email. Workspace invitation links are shared manually by the owner.
For sensitive data or a specific security requirement, contact us before connecting. These product controls are not a certification or a guarantee that Gatherow meets your organization’s compliance obligations.
Have a security question?
Contact info@tallinio.com with the requirement or concern. Please leave passwords, API keys and private datasets out of your message.
A little less copy. A lot more clarity.
Build with a clear view of your data.
Connect a source, choose the fields that matter, and see what comes together.