Compare
Reputation management platform checklist
A neutral buyer's checklist for evaluating any reputation/moderation platform, with Tamanor's honest status per item — including what is not yet done.
How to use this
These are provider-neutral criteria to evaluate any platform. Each line states Tamanor's honest status; where something is not yet done, it says so rather than implying completeness.
Security & data
Tenant isolation — yes: PostgreSQL row-level security isolates every tenant at the database layer.
Audit — yes: append-only, tenant-scoped audit log without secrets.
Token encryption — yes: OAuth tokens encrypted at rest in production; plaintext storage blocked in production.
Permission gates — yes: platform capability and workspace role must both permit an action.
Data ownership — yes: a customer's data is isolated per tenant and not shared or sold.
Key rotation — not yet: token-encryption key rotation remains a roadmap gap.
Export / retention controls — not yet: self-service export and retention policies are not implemented.
Workflow & operations
Approval workflow — yes: human approval before any action; fail-closed execution.
Provider health — yes: honest connector health/permission states, no fake green.
Disconnect lifecycle — yes: disconnecting removes local tokens; provider revoke is best-effort.
Workflow persistence — yes: proposals, approvals and outcomes persist and are auditable.
Pagination / scalability — yes: read syncs paginate with cursors and are idempotent.
Provider verification — partial: Facebook is live-verified; Instagram and Google Business are verification-pending; YouTube/LinkedIn/TikTok are research.
Frequently asked questions
- Does Tamanor meet every item?
- No — key rotation and export/retention are explicitly not done yet, and several providers are verification-pending. The checklist states each honestly.