Security principles
Ekipta follows least-privilege access, tenant-aware data separation, secure defaults and traceable administrative actions.
Account security
Passwords are stored using secure password hashing for new accounts, sessions use secure cookie settings and sensitive operations use CSRF protection where applicable.
Data isolation
Customer-company records are scoped by company identifiers and permission checks. Support access is time-limited and read-only where the secure support workflow is used.
Files and evidence
Uploaded files are validated by type and size in supported modules, and executable content is blocked in upload directories.
Monitoring and backups
Critical activities may be logged for security and accountability. Backups should be retained according to the configured operational and legal requirements.
User responsibility
Customers must use strong passwords, remove access for departing staff, configure roles correctly and avoid uploading unnecessary sensitive data.