Security architecture built for operational integrity
Creu Saathi enforces enterprise security at every layer—from database constraints to frontline permissions.
Multi-Tenant Isolation
Every query verifies organization membership on the server. Cross-tenant access attempts are blocked with 403 Forbidden before reaching business services.
Granular RBAC & Scope Enforcement
Permissions are modeled independently of role names. Workers and vendors are restricted to their assigned sites, tasks, and shifts.
Enterprise Session & Password Security
Passwords hashed using bcrypt with work factor 12. Sessions use HttpOnly, Secure, SameSite cookies with explicit expiration and server-side invalidation.
Append-Only Immutable Audit Trails
Every task transition, invitation, role change, and evidence sign-off is logged immutably. Historical events cannot be edited or erased by tenant administrators.
PII & Private Data Minimization
Student/resident personal contact data is minimized on frontline task screens. Vendors only see explicit work order details, never internal staff records.
Deterministic AI & Voice Boundaries
Speech interpretation and AI proposals are strictly validated against permissions. No AI model can independently verify tasks or bypass workflow rules.
Compliance Disclaimer: Creu Saathi provides digital audit trails and verifiable operational evidence. A software audit trail facilitates compliance inspection, but does not independently certify statutory, OSHA, clinical, or local municipal regulatory compliance without customer operational review.