Deny by default
Authorisation starts from nothing. A page or endpoint is reachable because a grant says so, not because no rule happened to forbid it. A subject with no grants for a product resolves to an empty permission set and is refused.
Resource
Mechanisms, not badges
This page lists what the platform does, in terms your security reviewer can verify. It does not claim certifications the platform has not been audited for, and it does not publish an SLA number that is really a contract term.
What you get
Tenant isolation
Row-level scoping, schema-per-tenant or database-per-tenant, per deployment.
Verified scope
Organisation and branch are read from a verified auth context, never from a request body.
Role-based access
Permissions are granted per role, per branch, and enforced on the server.
Append-only audit
A hash-chained trail; audit rows are never updated or deleted.
Right to erasure
Crypto-shredding removes readability of personal data without rewriting audit history.
Encryption
TLS in transit; encryption at rest at the storage layer.
What we will tell you plainly
We are a new platform. We have not completed an ISO 27001 audit and we do not claim one. If your procurement process requires specific attestations, raise it during evaluation and we will tell you honestly where we are.
Questions people actually ask
- Where is data stored?
- In the region agreed for your deployment. On-premises and your-cloud deployments are supported.
- Can we get an export of everything?
- Yes. Data export is a supported operation, not a support ticket.