Security Architecture
Security & Audit Architecture
Application Security, Role Control & Immutable Audit Logging
1. Encrypted Storage & Signed Downloads
All KYB trade licenses, candidate passports, and signed contracts are stored in secure private storage accessible only via temporary role-authorized signed URLs.
2. Immutable Audit Logging
Every login attempt, document view, KYC/KYB approval, offer acceptance, contract signature, and QR code generation is recorded in real-time within system audit logs capturing user ID, role, action, timestamp, IP address, and browser metadata.
3. Role-Based Access Control (RBAC)
Strict server-side middleware isolates administrative controls, employer dashboards, and candidate portals to prevent horizontal or vertical privilege escalation.