Security & Trust
Security isn't a feature bolted on at the app tier — it's enforced where the data lives. Here's how we protect your business.
Data-tier enforcement
Because iltoise runs business logic in the database rather than a sprawl of application servers, access control and validation are enforced at the data tier. Requests are evaluated against a whitelist before any data is touched — the query surface is a closed box, not an open API.
Tenant isolation & encryption
- Each tenant’s data is logically isolated.
- Per-tenant encryption keys protect data at rest.
- All data is encrypted in transit with modern TLS.
Least-privilege access
Production access is restricted, time-bound, and logged. Every privileged action is recorded in an append-only audit trail that cannot be silently altered.
Resilience & recovery
- Blue/green deployments for zero-downtime releases.
- Gold-master snapshots and tested restore procedures.
- Analytics workloads are offloaded so reporting never slows operations.
Continuous assurance
We monitor continuously, patch quickly, and validate our controls on an ongoing basis. We’re happy to walk security teams through our controls during evaluation.
Report a vulnerability
Found something? We appreciate responsible disclosure. Email security@iltoise.comand we’ll respond promptly.