Building safe-by-default tools in our Go web application

At incident.io, we handle sensitive customer data and prioritize its safety in our Go web application. We use multi-tenancy with a single database and application to manage customer data effectively. To ensure data security, we have implemented robust automated testing, organization scoping at the API layer, enforcing organization scope on database interactions, and writing safe-by-default interfaces for caching services. These strategies help us maintain confidence in our ability to keep customer data secure while continuing to develop a great product.