How are data and access protected?

Security starts in the connected systems: the app shell can only pass on data and functions it receives. Keycloak groups and subgroups control access; Nginx blocks routes without permission. Each app runs in its own container, has its own database credentials and only accesses its own schema. Logins, database access and AI access are logged. Security-critical systems are not the target. Apps with sensitive data require a separate review by the customer’s IT team or by us; the customer decides, for example, based on its technical and organisational measures.

Security and permissions