Access control
Permissions are role-based at module level and record level, with row-level isolation per entity and branch.
- RBAC on every route
- Row-level isolation by branch/entity
- Least-privilege defaults
SECURITY & COMPLIANCE
Trust is engineered, not promised.
Role-based access, row-level isolation, immutable audit trails and encryption — built into the core of the platform, not bolted on.
THE PILLARS
Security as architecture
Every data path goes through the same controls — there is no back door where a module skips them.
Immutable audit
Every sensitive action is recorded in a tamper-evident, chain-anchored audit log.
- Merkle-chained audit roots
- No deletion, no silent edits
- Full event history per record
Encryption
Data is encrypted in transit and at rest, with key management handled by the platform.
- TLS in transit
- At-rest encryption
- Secure secrets handling
Data protection
CNDP Loi 09-08 and GDPR-ready processing, with data subject rights supported by design.
- CNDP Loi 09-08 support
- GDPR-ready workflows
- Suppression and consent management
Data residency
Choose the region where your data lives. Export anytime in open formats.
- Customer-chosen regions
- Open-format exports
- On-premise options for Enterprise
Operational security
Backups, monitoring and security updates are part of the platform, not your problem.
- Automated backups
- Uptime monitoring
- Dependency and security patching
OPERATIONS
What keeps it running
The same engineering discipline that makes the platform fast is what keeps it safe.
Backup & recovery
Automated backups with tested recovery procedures and point-in-time restore.
Monitoring & alerts
Service health, latency and error tracking across the platform, with proactive alerting.
Updates without downtime
Continuous deployment with zero-downtime releases and scheduled maintenance windows.
Access reviews
Administrative actions are logged and reviewed; permissions follow roles, not habits.
COMPLIANCE
Regulatory-ready, worldwide
Opseron is designed so that compliance programs can be built on it — not so that compliance becomes your project.
CNDP Loi 09-08
Data subject rights, consent and suppression built into CRM and marketing modules.
GDPR
Processing records, export and erasure workflows, and audit trails that support accountability.
Local fiscal rules
Tax rates, statutory deductions and reporting rules are configurable per country — including TVA, VAT, sales tax and social contributions.
Contractual guarantees
Enterprise agreements include data processing terms, availability commitments and security addenda.
AUDIT US
See the controls in the demo.
30 minutes, your scenarios — including the security architecture.