Security

Built as modern SaaS from the start.

TenviaOS platforms are built with multi-tenant architecture, secure data isolation, role-based access, client-level permissions, and white-label readiness.

This makes each product ready to support independent businesses, growing operators, and multi-location companies.

Architecture highlights

How the platform is structured.

Multi-tenant structure

Every business operates inside its own tenant. Tenants do not share an application context.

Tenant-level data isolation

Records are scoped to the tenant that owns them at the data layer, not filtered in the interface.

Client-level data isolation

Within a tenant, client records are separated so portal users only reach their own data.

Role-based staff permissions

Staff access is granted by role. Permissions determine what is visible, not just what is editable.

Location-specific settings

Multi-location operators can scope staff access and configuration to individual sites.

White-label-ready branding

Branding is applied per tenant so the platform can be presented under an operator brand.

Secure document access

Documents are access-controlled against the record they belong to rather than shared by link.

Payment processor token support

Payment methods are held as processor tokens. Card numbers are not stored in the platform.

Audit logs and activity history

User actions and record changes are logged so account history can be reconstructed.

Responsible disclosure

Reporting a security issue.

If you believe you have found a security vulnerability in a TenviaOS platform, contact us before disclosing it publicly. We will confirm receipt, investigate, and keep you updated on remediation.

Please include enough detail to reproduce the issue. We ask that you avoid accessing, modifying, or deleting data belonging to any other customer while investigating.

A note on certifications

TenviaOS platforms are in active development. This page describes how the platform is architected. It does not claim any third-party audit, certification, or compliance attestation. If your organisation requires specific compliance documentation, contact us and we will tell you plainly where we currently stand.