Fully isolated organisations
Every record is tied to an organisation. The system won’t let anyone open another organisation’s data even through a direct link — and this is verified by automated tests.
Security
Security is not a feature added later. E-OFIS was built as a multi-organisation system from the start, and every request is checked for who is making it, from which organisation and with what rights.
Every record is tied to an organisation. The system won’t let anyone open another organisation’s data even through a direct link — and this is verified by automated tests.
Roles are assigned within an organisation. Every page and action is protected by its own permission; owner and administrator roles can only be assigned by the system administrator.
Every successful and failed login is recorded with its time, IP address and device.
HTTPS, HSTS and security headers (CSP, X-Frame-Options and more). Login attempts are rate-limited.
Mini App data is verified with Telegram’s signature; employees can only access the account linked to them.
Regular backups. A deleted file first goes to “Deleted items” and can be restored during the recovery period.
Security
In the demo we show the system on your own structure and answer your questions. No obligation.