Security and compliance

• Opt-out enforced at every send path
• Signature-verified webhooks (Stripe, Zoom, Resend, Twilio)
• Role-based access control and a full audit log
• TCPA-hour gating and 10DLC throttling for SMS
• One-click unsubscribe and CAN-SPAM-compliant footers