SECURITY & TRUST
A database per customer. No automatic deletion, ever.
How nuCEM isolates, authenticates, protects, keeps and recovers your data — and what is not there yet.
A separate database per customer
LiveEncrypted in transit and at rest
LiveSingle sign-on, instant revocation
LiveBranch partition and three access levels
LiveAppend-only audit log, kept at least a year
LiveBodies and attachments in object storage
Live
01
Isolation
- a separate database per customer
- tenant databases sharded behind a connection pooler
- tenant-first storage keys with a fail-closed namespace fence
- search queries carry a mandatory tenant filter injected server-side
- per-customer restore from nightly dumps
- production in its own dedicated cloud account, separate from test environments
02
Authentication
- single sign-on via Nucore's shared identity platform
- no passwords stored
- per-tenant asymmetric signing keys verified locally on every request
- 15-minute access tokens with silent refresh
- instant revocation on logout and deactivation
- admin invite is the only door in
03
Data protection
- TLS at the edge
- encryption at rest for storage, volumes and secrets
- passport and visa numbers as AES-256-GCM ciphertext with last-4 display and every reveal audit-logged
- OAuth and channel tokens encrypted
- secrets in a managed store, never in source
- 10-minute signed download links
- server-side upload validation, executables blocked
04
Retention
- conversations never hard-deleted (archive and spam are states)
- mail bodies and attachments kept long-term in object storage
- deletion only through an explicit retention policy
- append-only audit log kept at least one year
05
Reliability
- Kubernetes on AWS
- GitOps delivery, rollback is one revert
- every image scanned in CI
- managed Kafka with a transactional outbox and dead-letter queues
- continuous point-in-time recovery
- search rebuildable from the database and storage
- QA identical to production by ruling
06
Not there yet
- attachment virus scanning
- a web application firewall
- multi-region residency
- a public API
- the quarterly restore drill and the alarm set (planned)
07
Sub-processors & legal
the full list is in the privacy policy
- AWS
- Meta (WhatsApp)
- Microsoft
- Cloudflare
- Nucore's identity platform