Deployment
A dedicated instance per client, in Docker with HTTPS, hosted for you or on your own servers.
- Each client gets its own instance. There is no shared, multi-tenant cloud.
- “Hosted for you” means we run your dedicated instance for you, as a service.
Sign-in and access
Company sign-in through LDAP / Active Directory, with group-to-role mapping.
Passwords hashed with scrypt. Accounts lock after repeated failed sign-ins. The lockout thresholds are configurable.
Three roles: Admin, Engineer and Viewer. Contract values and stock unit prices are hidden from the Viewer role, enforced on the server. Viewers also don’t see who made each stock movement.
Application security
CSRF protection, rate limiting and a strict content security policy.
Audit trail
Every change to projects, expenses, budgets, stock, users and sign-ins is logged with who and when. Written in the same database transaction as the change.
How long the log is kept is configurable.
Backups and your data
Backups are checksum-verified (SHA-256) when created, and can be restored with a built-in restore command.
Your data stays yours, with full export.
Questions from your IT team
If you have a security questionnaire or want to review the deployment in detail, send it to mohamed@rawafidtech.com or raise it during the demo.
Last updated 12 October 2026