Security built into BizCortex

Protections that work in the background for every company.

BizCortex protects your data in several ways without any setup. This page explains what happens behind the scenes.

Fields and options

Sign in: Users sign in through Auth0. Multi factor authentication, single sign on, password rules and session limits are set up there.
Permissions: Every request is checked against the role of the user and the packages your company has booked. Pages and actions you may not use are hidden and refused.
Audit log with hash chain: Every important change is logged and chained, so later changes to the log can be detected.
Encrypted secrets: Passwords and keys of connected services are stored encrypted and are never shown again in full.
Upload checks: Uploaded files are checked. Executable files and scripts are refused, and files are scanned for malware when the operator has enabled it.
Rate limits: Public pages such as portals and the careers page limit how many requests one address can send. Too many requests get a message to wait.
Personal data registry: Every module declares which fields hold personal data, so access, rectification and erasure requests cover them.

Audit log
A tamper evident log of who created, changed or deleted what and when.
Retention and registry
See which modules store personal data, for how long, and which erasures wait for a retention period.