Security and data protection

Each customer gets its own application stack: the API, web app, Redis cache, object storage and nginx run on a virtual server dedicated to that customer. Your data is never processed in the same application as another organization's.

The database runs on Huawei Cloud's managed PostgreSQL service, with a separate database and database user for each customer. All traffic passes through Cloudflare.

API keys for SMS, email and AI providers are stored encrypted in the database with AES-256-GCM. Separate keys for encryption, the audit chain and session signing are derived from one master secret with HKDF-SHA256.

Personnel codes are stored only as Argon2id hashes. NFC trust tokens and live display credentials are also stored only as SHA-256 hashes.

Admin users sign in through Logto. Public sign-up is off; accounts are created only from email invitations valid for 7 days. Each user holds one or more roles, and roles map to 35 permission scopes.

Field staff sign in with a 4-character personnel code, which locks after 10 failed attempts in 15 minutes. Staff can save their phone with a passkey for quick sign-in without the code, and admins can revoke those devices.

Creates, updates, deletes, restores, escalations, routings, closures and exports are written to the audit log. Each entry stores the user, IP address, user agent and the data before and after the change.

Entries are linked in an HMAC-SHA256 hash chain. The entry detail shows whether each link in the chain is valid, so later changes can be detected. Exports of audit records are logged too.

The database is protected by the managed PostgreSQL service's automatic backups and point-in-time recovery. A full database dump is also taken before every software update.

Disk snapshots are recommended for file storage. Backup frequency, retention and restore steps are agreed with you during contracting.

Visitor feedback is anonymous by default. You decide whether name, phone and email fields appear and whether they are required. As the data controller, your organization writes its own privacy notice and consent text; the product does not impose a default.

Survey sessions do not store respondent identity. Visitor pages carry no analytics or advertising tracking scripts and use only functional first-party cookies. In the admin panel, contact details in the staff, user and team lists are masked.

Global and per-route rate limits, a hidden bot trap on visitor forms and duplicate blocking are built in. For example, the same message cannot be sent twice from the same location within 15 minutes.

The web app is served with HSTS, a Content Security Policy, nosniff and a strict referrer policy. Cookie-authenticated writes are protected against CSRF. Every release passes static code analysis, secret scanning and a dependency audit before it ships.

If you find a security issue, please write to support@enainnovation.com. We will review your report, get back to you and share how we plan to fix it.

ENA Innovation's ISO 9001 quality management and ISO 27001 information security management certification processes are in progress.