Security, Privacy & Data Isolation
ALFASIHUN is engineered with a defense-in-depth architecture. Learn how your financial records, advisory cases, and business models are safeguarded.
Strict Workspace Isolation
Every query, transaction, and report is strictly scoped to your verified account identity. Foreign object IDs and cross-tenant requests are systematically rejected at the server application layer.
Server-Side Authorization Authority
User identity is cryptographically validated on the server for every incoming API call. Client-side identity headers are never trusted for tenant authorization.
Immutable Audit Logging
Critical operations — including GL journal postings, invoices, permission updates, and advisory runs — record timestamped audit events with actor metadata.
Financial Precision Guarantee
All financial transactions are stored and computed in integer minor units (e.g. cents, paisas) to eliminate floating-point arithmetic drift on balance sheets.
Security Controls & Commitments
All traffic is encrypted over modern TLS 1.3 encryption protocols.
We never sell, rent, or trade your operational, financial, or case data. Your data belongs exclusively to you.
Workspace separation is enforced by the database itself, not only by application code, so it holds even if an application-layer check is ever missed.