Security and deployment
Your infrastructure. Your data. Your keys.
Both products are built to run inside your boundary. This page is for the IT, security and CSV people who will have to defend that.
Deployment
- Runs in your data centre, or in a cloud account that you own and control
- No dependency on a managed cloud service
- Container-based deployment with documented runbooks
- PostgreSQL today, with a schema style kept portable to Oracle and SQL Server
- Object storage on local disk, NFS, MinIO, S3 or Azure Blob
Tenant isolation
- The tenant is resolved on the server, from the URL or the verified token
- A tenant identifier is never accepted from the browser
- Every query is tenant-scoped, and isolation is covered by automated tests
- Per-tenant audit chains, so one tenant's trail never mixes with another's
Identity and access
- Single sign-on with Active Directory (LDAP), OpenID Connect and SAML
- Multi-factor authentication and configurable password policy
- Role-based access enforced on the server. The interface only reflects it
- Periodic access reviews, and maker-checker with self-approval refused
Data protection
- Envelope encryption for national identifiers and other sensitive fields
- Masking by default, with audited, purpose-bearing unmasking
- Retention schedules and legal hold executed in the database
- Governed exports that record purpose, masking mode, file hash and actor
Audit and integrity
- Append-only, hash-chained audit trail with chain verification
- Electronic signatures bound to a hash of the signed content
- Reason codes on governed transitions, from your own vocabulary
- Scheduled audit-trail review with owners and sign-off
Validation support
- Requirements, risk assessment and a traceability matrix generated from real test runs
- Installation and operational qualification evidence for your environment
- Versioned configuration with publish, rollback and promotion between environments
- Release notes and a validation summary with every release
Architecture
One boundary, and it is yours
On-premise boundary · your data centre
Browser and mobile
Sends no tenant identifier the server trusts
Application services
Tenant resolver, role checks and audit on every request
PostgreSQL
Tenant-scoped rows and an append-only event store
Object storage and jobs
Documents, evidence and background processing
Server-enforced roles, a per-query tenant filter, an operational audit log and a hash-chained GxP trail apply to every request.
Responsible disclosure
Found a security issue?
If you believe you have found a vulnerability in our website or products, please tell us before telling anyone else. Write to contactus@kryshara.com with the subject line "Security disclosure".
Please include the steps to reproduce, the affected address or version, and the impact you expect. Do not access data that is not yours, and do not degrade the service for others. We will acknowledge your report, keep you informed, and credit you if you wish once a fix is released.
Send us your security questionnaire.
We would rather answer it in full at the start than discover a blocker in procurement.