Security
Your data is safe with us.
OBiMS uses layered security controls to protect your business data, accounts, and operations at every stage.
Password Security
- Passwords are protected using modern security standards.
- Reset links are single-use, time-limited tokens sent to your verified email address.
- Account lockout activates after repeated failed login attempts to prevent brute-force attacks.
Authentication & Sessions
- Secure sign-in and session management help keep accounts protected.
- Sessions can be controlled and revoked to reduce account risk.
- Critical requests are validated on the server before access is granted.
Multi-Tenant Data Isolation
- Every business gets its own isolated database schema — no data is shared between tenants.
- All queries are scoped to the authenticated tenant; cross-tenant access is structurally impossible.
- Master admin and tenant data are stored in separate, access-controlled schemas.
Data Encryption
- Data is protected both in transit and at rest.
- Sensitive information is handled with strict protection controls.
- Security safeguards are built into our platform and operational processes.
Access Control
- Role-based access control (RBAC) with Owner, Admin, and Staff roles.
- Owners control which modules each staff member can access.
- Every mutation is recorded in an immutable audit log including the user, action, and timestamp.
Backups & Recovery
- Automated daily backups for all tenant databases, retained for 30 days.
- Point-in-time recovery available for Professional and Enterprise plans.
- Backups are stored in a geographically separate location from primary data.
Threat Protection & Abuse Prevention
- Cloudflare helps protect our platform from malicious traffic and common web attacks.
- Abuse prevention controls reduce automated and suspicious activity.
- Potential threats are monitored so our team can respond quickly.
Secure Development Practices
- Security reviews are part of our ongoing development process.
- Application inputs are validated to maintain platform integrity.
- We routinely update and monitor our systems to reduce known risks.
Found a vulnerability?
We take security reports seriously. If you have discovered a potential security issue in OBiMS, please contact us responsibly so we can address it promptly.
security@obims.appWe aim to respond to all security reports within 48 hours.
Ready to run your business securely?
Start your free 30-day trial and experience enterprise-grade security without the enterprise price tag.