security/
Security & trust
Concrete controls: SSO, mesh, secrets vault, WAF, SIEM, signed images.
Zero-trust architecture
SSO, vault-backed secrets, deny-all networking, WAF at the edge, audit into SIEM.
GDPR compliance & audit logs
Consent-first cookies, access control, and audit trails designed for EU/UK/US controls.
Modular, API-first design
Activate only entitled modules. One dashboard aggregates module APIs behind shared SSO.
Cloud or self-hosted deployments
Run as managed SaaS or on your infrastructure when policy requires it.
- OIDC SSO for the product and modules
- Zero-trust mesh for operator access
- Per-tenant secrets vault
- Edge reverse proxy + WAF
- SIEM + audit bridge
- Signed container images on the production path
- Tenant isolation with automated regression checks
- Isolated admin honeypot (never the real console)