Security
ConsciousRM treats tenant isolation, secure sessions, auditability, and recoverability as part of the application’s operating model.
Data boundaries
Authenticated requests run inside a firm-scoped row-level-security boundary. The active firm identifier is carried into the database session so records outside that boundary are not available to the request.
Sessions
Production sessions use signed, secure, HTTP-only cookies. They are host-only rather than shared across payroll.ninja subdomains, and state-changing authentication requests are origin-checked.
Operational controls
Requests carry identifiers for correlation, application errors use a consistent envelope, and firm activity is recorded in an audit trail for review.
Abuse protection
Application requests are rate-limited by authenticated identity or client address, and login attempts are throttled across application replicas.
Recovery
ConsciousRM is covered by the platform’s encrypted PostgreSQL backup process, including daily backups and continuous write-ahead-log archiving to offsite object storage.
Honest posture
This page describes controls documented in the running product. It does not claim a certification, audit, or compliance designation that has not been established.
Security in context
Use a product walkthrough to discuss access, roles, operating controls, and the questions that matter to your practice.