Security is not an afterthought
The same tenant isolation and access controls that protect your data protect every other tenant on Nuxtron — here's what that actually means underneath the product.
Encrypted at the field level
Sensitive fields — emails, names, social content — are encrypted with application-level encryption, not just disk-level encryption at rest.
Tenant isolation by design
Every query is scoped to a tenant, enforced at the database layer with row-level security policies — not just application logic that could be bypassed.
Modern password hashing
Passwords are hashed with bcrypt or Argon2id plus a server-side pepper, never stored or logged in plain text.
Role-based access control
Session tokens carry signed role claims, verified independently by both the app layer and the API — a compromised session can't grant itself admin access.
Audit trails on sensitive actions
Login, registration, and admin-level changes are logged with enough context to investigate — without storing raw credentials.
Rate limiting on every sensitive endpoint
Login, registration, and password-reset flows are rate-limited per account and per IP, independently, so one noisy tenant can't exhaust another's budget.
Have a security question?
For security disclosures, questionnaires, or a deeper technical review, reach out and we'll loop in the right person.
Contact security