What we actually do to protect your cases
No broad promises: the measures in place, verifiable in the security dossier we hand to your CISO.
Encryption
The credentials used to reach your systems are encrypted with AES-256-GCM, as are the attachments stored by the application. Traffic is encrypted in transit.
Separation between clients, tested on every release
An automated test tries, for each family of data, to reach another client’s resources. A family left uncovered blocks the release.
Permissions by action
Roles specific to each process and rights granted action by action: create, approve, export, delete. An unticked right is a removed right.
Sign-in
Single sign-on via SAML or OpenID Connect, account provisioning from your directory (SCIM), and a second factor that can be enforced organisation-wide.
Traceability
Every action is logged with its author and date, including when an administrator acts on behalf of a user.
Backups
Scheduled, encrypted instance archives, with an off-site copy the application cannot delete. A restore gets tested, not assumed.
Need to go further?
We hand your IT and security teams a complete dossier: authorisation matrix, architecture, restore procedure.