Security overview

TaskFlow is deployed on Cloudflare Workers. Cloudflare provides the network and runtime infrastructure used to serve the application and API.

Account access uses Better Auth session handling. Protected routes require an authenticated session before workspace content is served.

Production traffic should be served over HTTPS so data is protected while moving between your browser and the service.

TaskFlow keeps protected application routes separate from public routes and validates task operations through shared server-side data and API logic.

Security practices evolve with the product. Dependencies, access controls, logs, and deployment configuration should be reviewed regularly as the service changes.