1. Data Encryption
NEXENOPS protects business records using advanced cryptography:
- Data in Transit: Encrypted using TLS 1.3 to secure web terminals and external API connections.
- Data at Rest: Database assets, backup snapshots, and log archives are encrypted using the AES-256 standard.
- Password Hashing: Staff passwords are salted and hashed using bcrypt to prevent credential exposure.
2. Tenant Isolation
We enforce strict multi-tenant logical boundaries. Each business owner holds isolated datasets. All service-layer queries check database authorization keys to prevent data contamination across tenants.
3. Identity & SSO Control
Access control is backed by Role-Based Access Control (RBAC). In addition, Enterprise and Ultimate subscriptions support Single Sign-On (SSO) integration using OIDC (OpenID Connect) and SAML 2.0. This allows your team to log in using centralized corporate portals like Okta or Microsoft Entra ID.
4. Infrastructure Security
NEXENOPS instances run on Google Cloud Platform and Amazon Web Services data centers featuring:
- 24/7 biometric physical site access locks.
- Automated DDoS protection using edge networks.
- Continuous runtime logging of all server queries and configuration modifications.
5. Compliance & Audits
We design our code bases according to SOC 2 (Type II) safety principles. Credit card processing is delegated to Stripe, ensuring full PCI-DSS Level 1 compliance. We do not store raw cardholder data.
6. Backup & Recovery
Our database engines execute full backups every 24 hours. Redundant database logs are replicated to geodistributed secondary zones to ensure rapid failover and data recovery in case of primary zone outage.
7. Reporting Protocols
If you identify a security flaw or vulnerability on NEXENOPS, please report it immediately to our security response team: security@nexenops.com. We review disclosures within 24 hours.