Data Security - Fabric

Authentication and Access Control

Access to fabric systems is controlled and monitored.

• Authentication: All users must authenticate through secure login procedures. Multi-factor authentication is supported where applicable.
• Access Control: Role-based access control ensures users only have access to the data and actions that are relevant to their role. Permission can be scoped by:
  • Tenant: Restricts access to a specific customer or environment
  • Module: Restricts access to specific services or features.

Data Encryption and Storage

fabric protects customer data through robust encryption practices and secure infrastructure.

• Data at Rest:
  • Encrypted using industry-standard algorithms such as AES-256.
  • Stored in secure cloud environments with restricted access controls.
  • Backups ensure data durability and support recovery.
• Data in Transit:
  • Secured using HTTPS and TLS 1.2 or higher.
  • Applies to all external and internal service communications.
• Ongoing Security Monitoring:
  • Continuous monitoring is in place to detect vulnerabilities in storage and infrastructure.
  • Infrastructure and services are reviewed to maintain compliance and security standards.

Tenant Isolation

fabric enforces strict separation between tenants to ensure data integrity and privacy.

• Each tenant’s data is isolated at all levels of the platform.
• Access controls are implemented programmatically and enforced across services.
• Controls are reviewed to ensure consistent tenant separation.

Monitoring, Auditing, and Incident Response

fabric actively monitors its systems to maintain platform security and ensure rapid response to potential issues.

• Monitoring and Alerts:
  • Continuous monitoring detects unauthorized access, anomalies, and system failures.
  • Real-time alerting systems notify teams of suspicious activity.
• Auditing:
  • All access logs and system changes are recorded and auditable.
  • Logs are retained based on internal data retention policies.
• Incident Response:
  • Defined procedures ensure rapid triage and remediation.
  • Relevant stakeholders are notified during incidents as part of the response process.

Secure Software Development

fabric integrates security into every stage of the software development lifecycle.

• Code Reviews:
  • All code is reviewed for security vulnerabilities before deployment.
• CI/CD Safeguards:
  • Continuous integration and deployment (CI/CD) pipelines enforce automated build-time checks and security gates.
• Developer Training:
  • Developers receive ongoing training in secure coding practices and industry-standard security protocols.

Regulatory Readiness and Data Governance

fabric implements data protection and privacy controls aligned with industry standards.

• Data Protection Principles:
  • Core practices such as encryption, access control, and secure storage are enforced across the platform.
• Governance Policies:
  • Internal policies define how customer data is collected, accessed, retained, and deleted in accordance with applicable laws and regulations.
• Transparency and Accountability:
  • fabric maintains clear processes for data handling and supports customer compliance with regional regulations, such as privacy and data residency requirements.