Privelos protects the workspace through independent layers — from sign-in and tenant isolation to file checks, audit trails and recovery.
No single control eliminates risk. Privelos therefore combines identity protection, least privilege, database barriers, secure defaults and traceable operations. The safeguards support one another if one layer fails.
Verified email, long passwords, mandatory multi-factor authentication and time-limited sessions make a stolen password insufficient.
Each customer works in a separate tenant. Access is checked in the service layer and reinforced by PostgreSQL row-level security.
Sensitive secrets are encrypted, tokens are stored as hashes and uploaded evidence is checked before it becomes available.
Protected changes leave an audit trail. Backups are kept outside the primary production environment and form part of recovery work.
Safeguards are integrated into the workflow and help the organisation govern access, follow changes and retain control of its records.
A content security policy with unique nonces, security headers, origin checks and TLS reduce browser-based attacks.
Roles and granular permissions limit what users can read and change. Free read-only access makes oversight possible without edit rights.
Type checks, automated tests, linting, production builds, and dependency and vulnerability checks form part of the release gates.
The organisation's structured registers, document versions and audit history can be exported without passwords, MFA secrets or sessions.
Privelos is responsible for the platform's technical and organisational safeguards. Customers remain responsible for appropriate user access, secure devices, accurate information and the legal decisions documented in the service.
We describe the safeguards actually in use. We do not claim that technology can make a service risk-free or independently guarantee GDPR compliance.
Do not include passwords, authentication codes, sensitive personal data or full vulnerability details in an initial unencrypted message. Contact us first so that we can arrange an appropriate channel.