Enterprise-grade security forSMB teams

Technische controles (geverifieerd in product)

• Passwords hashed with bcrypt (cost factor 12)
• JWT stored in HTTP-only cookies — never localStorage
• Rate limiting: 10 req/min on auth endpoints, 100 req/min general API
• 2FA enforced at organization level by admin (TOTP + email OTP)
• Audit log retention: indefinite, exportable as CSV
• Single-tenant data isolation: every query scoped by organization ID