Security&Trust,ByArchitecture
We lead with the architecture you can verify, not badges we don't hold yet.
Sixarchitecturalclaims,allverifiable
Row-level tenant isolation.
Postgres FORCE ROW LEVEL SECURITY on 22 tenant-scoped tables, behaviorally proven fail-closed: no tenant context returns zero rows, the wrong tenant returns zero rows, and cross-tenant writes are rejected outright — running under a least-privilege application role, not the database admin.
Enterprise identity.
Auth.js v5 fronted by Azure Entra External ID — a real CIAM/SSO-capable identity provider, not a bespoke username/password system.
API gateway governance.
A 3-lane Azure API Management architecture (public / internal / private), subscription-key and OAuth 2.0 On-Behalf-Of authentication, rate-limiting and quota, centralized diagnostic logging.
No static secrets, Azure to Azure.
Managed Identity is the standard pattern for blob storage, Key Vault, and Cosmos DB access across the estate — genuinely reduces secret-sprawl risk versus hardcoded keys.
Full auditability.
A queryable, tag-filterable audit trail of every tool and agent run; a dedicated platform-admin Audit route.
Federated CI/CD.
GitHub Actions OIDC (no long-lived deploy secrets) drives production deployments; infrastructure is managed via drift-protected Azure Deployment Stacks.