Least-privilege access
Request and enable only the Meta access required for a documented support workflow.
Security
Practical safeguards for a controlled private beta
Security language should be specific enough to be useful and restrained enough to be true. This page describes working principles without claiming certifications, guarantees, or controls that have not been independently verified.
Working principles
Limit access, reduce exposure, preserve accountability
These principles guide the private beta and ongoing release decisions. They are not an audit report or certification statement.
Authorized team boundaries
Restrict private-beta workspaces to approved participants and already-authorized Page connections.
No secrets in inquiries
The contact interface rejects attachments and warns users not to share passwords, tokens, credentials, or secrets.
Operational safeguards
Security claims require evidence
Access, provider relationships, contact routes, incident handling, form delivery, and legal disclosures must stay aligned with the service’s actual operation.
Access review
Verify who can reach each workspace and which Page authorizations remain valid.
Credential separation
Keep service secrets out of public code, forms, screenshots, and customer messages.
Controlled intake
The inquiry form shows whether delivery is available and limits the data it accepts.
Synthetic product scenes
Use neutral synthetic product scenes and avoid unrelated private deployment content.
Security inquiries
Keep sensitive material out of inquiries
Do not include passwords, access tokens, credentials, customer message content, or other secrets in an inquiry. Use the Security category when the contact form indicates that delivery is available.
This page intentionally makes no claim of SOC 2, ISO 27001, encryption scope, penetration testing, uptime, or breach-response timing. Any future claim must be backed by current evidence and legal review.
Continue the trust review
See how the service approaches Meta Platform Data, customer context, access, disconnection, and deletion requests.