fabric enforces strong security measures across its platform. This topic outlines key fabric security practices.

​
Authentication and Access Control

Access to fabric systems is controlled and monitored.
  • Authentication: All users must authenticate through secure login procedures. Multi-factor authentication is supported where applicable.
  • Access Control: Role-based access control ensures users only have access to the data and actions that are relevant to their role. Permission can be scoped by:
    • Tenant: Restricts access to a specific customer or environment
    • Module: Restricts access to specific services or features.

​
Data Encryption and Storage

fabric protects customer data through robust encryption practices and secure infrastructure.
  • Data at Rest:
    • Encrypted using industry-standard algorithms such as AES-256.
    • Stored in secure cloud environments with restricted access controls.
    • Backups ensure data durability and support recovery.
  • Data in Transit:
    • Secured using HTTPS and TLS 1.2 or higher.
    • Applies to all external and internal service communications.
  • Ongoing Security Monitoring:
    • Continuous monitoring is in place to detect vulnerabilities in storage and infrastructure.
    • Infrastructure and services are reviewed to maintain compliance and security standards.

​
Tenant Isolation

fabric enforces strict separation between tenants to ensure data integrity and privacy.
  • Each tenant’s data is isolated at all levels of the platform.
  • Access controls are implemented programmatically and enforced across services.
  • Controls are reviewed to ensure consistent tenant separation.

​
Monitoring, Auditing, and Incident Response

fabric actively monitors its systems to maintain platform security and ensure rapid response to potential issues.
  • Monitoring and Alerts:
    • Continuous monitoring detects unauthorized access, anomalies, and system failures.
    • Real-time alerting systems notify teams of suspicious activity.
  • Auditing:
    • All access logs and system changes are recorded and auditable.
    • Logs are retained based on internal data retention policies.
  • Incident Response:
    • Defined procedures ensure rapid triage and remediation.
    • Relevant stakeholders are notified during incidents as part of the response process.

​
Secure Software Development

fabric integrates security into every stage of the software development lifecycle.
  • Code Reviews:
    • All code is reviewed for security vulnerabilities before deployment.
  • CI/CD Safeguards:
    • Continuous integration and deployment (CI/CD) pipelines enforce automated build-time checks and security gates.
  • Developer Training:
    • Developers receive ongoing training in secure coding practices and industry-standard security protocols.

​
Regulatory Readiness and Data Governance

fabric implements data protection and privacy controls aligned with industry standards.
  • Data Protection Principles:
    • Core practices such as encryption, access control, and secure storage are enforced across the platform.
  • Governance Policies:
    • Internal policies define how customer data is collected, accessed, retained, and deleted in accordance with applicable laws and regulations.
  • Transparency and Accountability:
    • fabric maintains clear processes for data handling and supports customer compliance with regional regulations, such as privacy and data residency requirements.