Security that stays on the server.

License checks are decided by Signet’s servers. Client-side checks support that decision but are not the final authority.

Dashboard, API and SDK traffic use HTTPS, and sensitive records are protected at rest. We do not publish implementation details that would make those controls easier to bypass.

Roles, device binding, optional IP restrictions and license revocation let you decide who can use your software. These controls are signals, not a guarantee against a determined user.

No local check is tamper-proof. Keep valuable operations behind server authorization, review access activity, and revoke a license when needed.