Security

An overview of how EMS protects your company's data.

Data Storage

All application data is stored in a managed PostgreSQL database. EMS is multi-tenant: every tenant-scoped table carries a tenant identifier, which is auto-enforced by our data-access layer so a query that forgets to filter by tenant still cannot leak data across tenants.

Encryption

All traffic between your browser, our mobile app, and our servers is encrypted in transit via HTTPS/TLS. Passwords are hashed at rest (never stored in plaintext), and database volumes are encrypted at rest.

Backups

We run daily automated backups of the production database, retained on a rolling basis, so data can be restored in the event of an incident.

Access Control

Access is role-based (super admin, tenant admin, employee) and every access token carries a tenant claim that is verified on every request. Tenant admins can only ever see and manage data within their own tenant; cross-tenant access is not possible through the application.

Authentication

We use short-lived JWT access tokens paired with rotating refresh tokens (hashed at rest). Changing your password or suspending a tenant immediately revokes existing access tokens.

Reporting a Concern

If you believe you've found a security issue, email security@ems.anantahq.com and we'll respond promptly.