Sandbox environment
Isolated project type for safe integration, testing, and PM review — no production usage charged.
Security & Compliance
Enterprise security. Built into every layer.
From environment isolation to role-based access and IP restrictions — encatch is built for teams where security is not optional.
- Sandbox isolation and controlled production promotion
- Roles, domain controls, IP restrictions, and enterprise SSO
- Scoped API keys with HMAC identity signing
Security layers
Access Control
Domain locking
IP whitelisting
Role-based permissions
Environments
Sandbox isolation
Production promotion
No dev access to prod
API Keys
Domain-scoped
Env-scoped + expiry
Data Governance
Configurable retention
Audit log
Capabilities
Security at every layer of the stack.
From sandbox isolation to enterprise SSO — encatch gives IT admins and security teams the controls they need, without slowing down the product team.
Production promotion
PMs promote sandbox configs to production. Developers never need production access.
Custom roles
Define roles at org and project level — feedback manager, integration manager, system admin, and more.
Domain locking
Prevent unauthorized users on your domain from signing up to the admin portal.
IP whitelisting
Restrict admin portal access to trusted IP addresses and corporate networks.
SSO (OIDC / SAML)
Enterprise single sign-on integration with your identity provider — OIDC and SAML supported.
API key scoping
Keys scoped to specific domains, environments (sandbox/production), and permission types.
Audit log
Immutable log of every admin action — retention changes, key revocations, role updates.
Configurable retention
Set your data retention window from 3 months up to 2 years. Records purged automatically.
Sandbox rate limits
Lower rate limits in sandbox protect the platform while giving enough capacity for testing.
Key expiry controls
Keys scoped to specific domains, environments (sandbox/production), and expiry dates — no stale credentials.
HMAC identity signing
Server-side HMAC-SHA256 signatures verify every user identity call. Time-bound validity windows prevent replay attacks and protect MAU billing integrity.
Sandbox environment
Ship feedback safely. No production access required.
In most tools, configuring feedback requires developers and PMs to work in production — which means either giving developers production access, or constant back-and-forth coordination. encatch Sandbox breaks that model entirely. PMs configure forms, triggers, and screen paths in a fully isolated environment. Developers implement SDK events there. Once everything is validated together, the PM promotes the configuration to production — no developer ever touches it.
- PMs configure feedback experiences in Sandbox without developer involvement in production
- Developers implement SDK events and URL paths in Sandbox only — no production credentials needed
- PM reviews the full end-to-end flow in Sandbox before a single line ships to users
- One-click promotion from Sandbox to Production — controlled entirely by the PM
- Sandbox activity does not consume production MAU, response, or destination quotas
- Use Sandbox for ongoing validation — new forms, events, and experience changes, continuously
Sandbox
Safe to iterate
Production
PM-controlled
How teams work together
PM
Configures feedback forms, triggers, and screen paths in Sandbox
Dev
Implements SDK events and URL paths in Sandbox — no production access needed
PM
Reviews end-to-end in Sandbox. Approves and promotes config to Production
Prod
Production config goes live — developers never touched it
Sandbox usage does not count against production quotas
Security controls
Control access. Protect every identity.
Connect organization permissions, scoped credentials, and server-side identity signing.
The right people see the right things — nothing more.
encatch's role system gives you surgical control over who can do what. Roles are defined at the organization level or scoped to individual projects — so your integration manager can manage webhooks without seeing feedback responses, and your feedback manager can analyze responses without touching API keys or billing.
- Custom roles at both organization and project level — no one-size-fits-all permissions
- Org Admin role is immutable and always protected — cannot be deleted or modified
- Domain locking prevents unauthorized signups on your corporate domain
- IP whitelisting restricts admin portal access to your office or VPN networks
- SSO via OIDC or SAML for enterprise identity provider integration
Custom roles
Org Admin
Organization level
Manage membersManage rolesAll projects
Feedback Manager
Project level
View responsesManage formsExport data
Integration Manager
Project level
Manage destinationsManage API keysView pipeline
Admin portal controls
Domain locking
Prevent unauthorized signups on your domain
IP whitelisting
Restrict admin access to trusted networks only
SSO (OIDC / SAML)
Enterprise identity provider integration
Data governance
Your data, your way — with a full paper trail.
encatch gives compliance teams the controls they need: configurable retention windows, automated data purging, and immutable audit logs for every admin action. Every deletion, key revocation, and role change is logged — so your security team always knows what happened and when.
- Configurable retention periods from 3 months up to 2 years
- Automated purging — data older than your retention window is removed automatically
- Immutable audit log covers retention changes, key revocations, and role updates
- Daily export to S3 or webhook before retention window closes — your data, your archive
Data governance
Data retention
Retention window
Up to 2 years3 months (Free)2 years (Paid)
Audit log
admin@acme.com · retention_updated · 90 → 30 days
2h agodev@acme.com · api_key_revoked · MYAPP_WEB_OLD
5h agoadmin@acme.com · role_created · Integration Manager
1d agoProduct journey
Keep following the signal.
A little more detail
Security & Compliance, answered
Common questions about sandboxing, access control, and data governance in encatch.
Is there any feedback tool that provide audit logs?
Encatch maintains a full audit trail of every admin action, configuration change, form publish event, and access change. Audit logs are designed to support enterprise security review requirements and internal compliance workflows.
Which feedback software have sandbox environments?
Encatch provides separate sandbox and production environments with promotion controls, so teams can test new survey configurations, routing rules, or targeting logic in a safe environment before pushing changes live to real users.
What is the best feedback software suitable for healthcare or financial services teams?
Encatch includes the infrastructure controls that regulated industries typically require: PII field masking, cookie-less mode, HMAC identity signing, role-based access controls, API key scoping per environment, and a full audit trail. Teams in financial services, healthcare, or insurance should review the Security and Compliance page and contact Encatch to discuss specific compliance requirements before committing.
Is Encatch GDPR compliant?
Encatch includes the core technical controls required for GDPR-compliant data handling: PII field masking to automatically exclude named data from storage, cookie-less operating mode, HMAC identity signing for request verification, and consent management configuration. Teams requiring a DPA can contact Encatch directly.
Does Encatch support SSO?
Yes. Encatch supports Single Sign-On via OIDC and SAML, allowing enterprise teams to connect their existing identity providers. SSO is available on Enterprise plans.
Enterprise ready
Security that works for your team — not against it.
Sandbox environments, granular roles, and API key scoping mean your team ships faster without compromising control. Talk to us about enterprise deployment options.