Zero-Trust Infrastructure
Security & Compliance Architecture
A comprehensive overview of how Tomvis safeguards enterprise workflows, protects patient and financial records, and enforces rigorous access controls.
Transparent Compliance Statement & Demo Data Safety
Tomvis Framework is engineered according to established industry security standards and good practices (such as OWASP Top 10, PDPA health data privacy guidelines, and double-entry accounting controls).
Important Notice: We strictly refrain from claiming formal third-party regulatory certifications that have not yet been officially audited. Furthermore, this demonstration portal operates in complete isolation using 100% synthetic mock fixtures. No live hospital HIS, bank accounts, or employee databases are ever linked.
Defense in Depth
9 Core Security Pillars
Every layer of the Tomvis Framework is guarded against unauthorized access, data leaks, and tampering.
Identity Layer
Authentication & Identity Verification
- Stateless JWT tokens paired with cryptographically secure session rotation.
- Argon2id password hashing with randomized salting resistant to GPU brute-force attacks.
- Anti-credential stuffing protection and automated IP account lockouts after consecutive failed attempts.
- Support for enterprise single sign-on (SSO) and LDAP/Active Directory integration.
Authorization Guard
Role-Based Access Control (RBAC)
- Hierarchical permission inheritance (System Admin > Regional Director > Site Supervisor > Operator).
- Fine-grained attribute-based access control (ABAC) scoping records strictly to assigned facilities.
- Zero default privileges: explicit allow-lists enforced at both the API gateway and ORM layers.
- Dynamic permission checks on every incoming request prevents horizontal and vertical privilege escalation.
Audit Trail
Tamper-Evident Audit Logging
- Immutable logging of all Create, Read, Update, Delete (CRUD) actions on sensitive entity records.
- Captures exact actor user ID, client IP address, timestamp down to milliseconds, and pre/post change diffs.
- Clinical chart and financial ledger views logged to meet strict electronic record accountability.
- Audit logs stored in partitioned append-only write streams to prevent supervisor alteration.
Cryptography
End-to-End & At-Rest Encryption
- All client-server communications strictly enforced via modern TLS 1.3 with forward secrecy.
- Sensitive database columns (passwords, bank accounts, patient identifiers) encrypted using AES-256-GCM.
- High-security file storage for photo attendance and contract documents with encrypted blob buckets.
- Internal service-to-service communication protected by private network tunneling.
Gateway Armor
API Security & Threat Mitigation
- Strict Cross-Origin Resource Sharing (CORS) enforcement locking endpoints to authorized domains.
- JSON Schema validation rejecting malformed, unexpected, or excessively large payloads.
- Sliding-window rate limiting on public and authentication endpoints to block denial-of-service attempts.
- Automated XSS sanitization and Content Security Policy (CSP) headers applied globally.
Session Guard
Session Security & Token Lifecycle
- Cookies flagged with HTTPOnly, Secure, and SameSite=Strict to completely prevent JavaScript interception.
- Inactivity session timeouts with graceful background token refresh before expiry.
- Instant server-side token revocation and blacklist broadcasting upon user logout or password reset.
- Concurrent session detection and restriction to prevent shared credential abuse.
Zero Secret Leaks
Environment Secret Management
- Zero secrets stored in code repositories or client-accessible bundles.
- Database credentials, encryption keys, and external service tokens injected via isolated environment variables.
- Continuous automated repository scanning preventing accidental credential commits.
- Separate key vaults between Staging, Demo Sandbox, and Enterprise on-premise environments.
Data Integrity
Database Security & Connection Isolation
- 100% prepared statements with parameterized queries preventing SQL injection vulnerability by design.
- Database user accounts provisioned with strict principle of least privilege (no root execution).
- Database listening interfaces locked to private VPC loops with zero public IP exposure.
- Automated encrypted daily snapshots with tested point-in-time recovery capabilities.
Multi-Factor Ready
2FA / MFA Ready Architecture
- Pre-built TOTP (Time-Based One-Time Password) engine compatible with Google Authenticator and Microsoft Authenticator.
- Emergency one-time recovery backup codes generated and hashed upon 2FA enrollment.
- Enforceable MFA policies requiring mandatory two-factor on administrative and clinical supervisor roles.
- FIDO2 / WebAuthn architectural readiness for hardware biometric keys.
Conduct an On-Premise Security Review
We welcome technical audits from enterprise cybersecurity teams, provincial health inspectors, and cooperative auditing committees.