SECURITY & DATA
Security designed into the BizFayd workspace.
This page describes controls reflected in the current platform design. Only controls actually implemented in production should remain published.
Tenant isolation
Tenant-scoped application queries and ownership checks are used to separate business workspaces.
Authentication
Strong-password validation, secure sessions, session rotation and authentication throttling are part of the platform design.
Application security
State-changing requests use CSRF protection, prepared SQL and role checks. Output should be escaped before rendering.
Auditability
Application and platform-administrator actions can be recorded for support, security and operational review.
Payments
Payment providers should host or tokenise sensitive card details. BizFayd should not store full card details directly.