Security

Multi-level Security Concept

We rely on proven standards and modern technologies to protect your data from unauthorized access.

Access Control

• 2-Factor Authentication (2FA): Optional protection via a second code by email for every login.
• Brute Force Protection: Automatic blocking after multiple failed login attempts.
• Session Management: Automatic logout upon inactivity.

Rights & Roles

Define precisely who is allowed to do what. Our RBAC system (Role Based Access Control) allows control down to the field level:

• Table Rights: Read, write, delete, export per table.
• Visibility: Hide sensitive fields for certain groups.
• Row-Level Security: Restrict access to records (e.g., "Salesperson sees only own customers").
• Audit Compliance: Use Read-Only protection for records to protect completed processes from subsequent editing.

Technical Security

• CSRF Protection: Prevents unwanted actions by third parties.
• SQL Injection Protection: Consistent use of Prepared Statements.
• XSS Protection: Automatic sanitization of user inputs.