Access and permissions
Accounts, members and operations have their own scopes. Sensitive actions are validated again on the server.
Security
Security applied to real platform use.
Ecofyx combines authentication, account and operation permissions, protected sessions, server-side validation and specific controls for public pages and links.
Core security controls
Public links and pages
Public and temporary links have limited scope. Access rules are applied according to the form or operational context.
Uploads and evidence
Files are validated and stored through protected platform flows.
Session protection
Ecofyx uses protected session cookies, CSRF controls in authenticated flows and security headers.
Data and history
Operational records remain tied to the account, permissions and operation context.
Backups and monitoring
The operating model includes backup routines, readiness checks, technical logs and availability monitoring.
Security is a shared responsibility
Ecofyx protects platform controls and infrastructure. Customers remain responsible for the legality, necessity and permissions of the data they collect and share.
Start free