Ask Osolix — instant answers
Security
Security built into every layer
Osolix protects your asset and financial data with defence-in-depth controls — from authentication and encryption to multi-tenant isolation and an immutable audit trail — aligned to the security and privacy standards your teams rely on.
Controls at every layer
Authentication & access
- •Two-factor authentication with TOTP authenticator apps
- •Single sign-on via SAML and OIDC (Microsoft Entra, Google, Okta)
- •Passwords checked against known-breach corpora, 12-character minimum
- •Automatic lockout after repeated failed sign-ins
- •Step-up re-authentication for high-value actions
Authorisation
- •Fine-grained, capability-based access control
- •Segregation-of-duties enforcement on sensitive workflows
- •Per-module entitlement gating
Data protection
- •TLS 1.2+ in transit; encryption at rest
- •Secrets sealed with a managed encryption key ring
- •Authenticator and SSO secrets individually encrypted
Tenant isolation
- •A fail-closed tenant filter scopes every query
- •No unsafe direct-id lookups that could cross tenants
- •Continuously verified by an automated cross-tenant test suite
Auditability & integrity
- •Immutable who-what-when audit trail
- •Soft-delete — customer data is never hard-deleted
- •Optimistic concurrency prevents silent overwrites
Operations & transparency
- •Coordinated vulnerability disclosure program
- •Regular penetration testing
- •Published data-retention schedule
- •Tested backup & restore (1-hour RTO / 5-minute RPO)
- •Static analysis and dependency scanning in CI
Aligned to recognised standards
Our controls are designed and reviewed against the frameworks our customers rely on:
OWASP ASVSOWASP Top 10ISO 27001 controlsSOC 2 control objectivesGDPRUAE PDPLKSA PDPL
Osolix designs to and supports these frameworks. We do not claim formal certification unless and until the corresponding independent audit is complete.
Need detail for a security questionnaire or vendor review? Use our contact form (topic: Security), or visit our Trust Center for architecture, controls, and compliance evidence.