1. Security by Design Philosophy
In the construction industry, the confidentiality of gross margins, supplier prices, and technical details is vital. CIVIL WORKS applies the Security by Design principle aligned with ISO 27001 standards.
2. Authentication and Session Protection
Authentication relies on strict protocols:
- Cryptographic Hashing: Passwords are one-way encrypted and never stored in plain text.
- Session Management: Protection against XSS/CSRF via secure tokens.
3. Strict Data Isolation (Multi-tenant & RBAC)
Our architecture ensures complete isolation via Role-Based Access Control (RBAC):
- Your financial drafts are invisible to competitors.
- Sharing is done exclusively via unique cryptographic tokens.
4. Infrastructure, Encryption, and Resilience
Data protection involves a robust infrastructure:
- Encryption in transit: Transfers protected by TLS 1.3 (HTTPS).
- Encryption at rest: Sensitive databases are AES-256 encrypted.
- Disaster Recovery: Geo-replicated daily automated backups.
5. Intrusion Prevention (WAF & DDoS)
Our servers are equipped with Web Application Firewalls (WAF) and anti-DDoS systems blocking SQL injections in real time.
6. Incident Reporting (Bug Bounty)
If you identify a vulnerability or abnormal activity, contact our team:
- Security Hotline: +216 55 611 614
- Tech Audit: contact@civilis.online