Trust
Live practicesHow SevaRan is actually secured
Built for multi-tenant hospitality software — isolation and authorization are product requirements, not slides.
Multi-tenant isolation
Authenticated tenant work runs inside AsyncLocalStorage tenant context. Prisma injects tenantId filters on tenant-scoped models so cross-tenant reads and writes are blocked by default — proved in isolation harnesses.
Two-plane RBAC
PLATFORM and TENANT planes are hard-separated. Mutating services call authorize(); SYSTEM jobs (scheduler) use an explicit allow-list rather than a silent bypass.
Append-only application audit
Business mutations write through a shared audit path. AuditLog is create-only at the application layer (updates/deletes blocked in Prisma). We do not claim WORM or cryptographic immutability.
Authentication
Passwords use argon2id. Access and refresh JWTs sit on revocable sessions; refresh tokens are stored hashed and reuse detection revokes the session.
Production env rails
Production refuses placeholder JWT secrets and test-header auth bypass so misconfigured deploys fail closed.
Talk security with us
Request a security package, questionnaire answers, or DPA discussion — no fake seals on this site.