Security & Governance Architecture
Enterprise Security Standards
OBCRM is built for high-stakes operations. Managing academic admissions, financial wires, and visa portfolios requires strict protection layers. We implement security best practices across every level of our cloud and native applications.
Encryption in Transit, AES-256 Capability at Rest
All network requests are served over HTTPS/TLS. We maintain a per-tenant AES-256 envelope-encryption module with key rotation for protecting sensitive fields, and are progressively extending its coverage across stored records.
Strict Logical Tenant Isolation
Our software enforces tenant isolation on every query via mandatory tenant-scoped filtering. Cross-tenant data access is blocked at the application query layer.
Immutable Audit Logging
Critical system events—including transcript downloads, credential updates, and permissions configuration changes—are written to an append-only audit log.
Automated Snapshot Backups
We run automated database backups with verification and restore tooling, synced to off-site storage to support operational recovery.
Role-Based Access Control (RBAC)
Administrators specify granular privilege scopes for individual counselor profiles. Branch offices are restricted from viewing neighboring datasets, preventing bulk student transcript downloads or leaks.
Safe Credentials Vault
Third-party API credentials (such as Twilio tokens) are encrypted before storage. Cookies and tokens are securely isolated in sandboxed browser localStorage.
Vulnerability Management
Releases pass through automated security checks, and third-party packages are screened against known vulnerability databases.
If your security audit team identifies any system vulnerabilities or requests details on backup storage zones, please reach out to our security desk: security@obcrm.net.
This page covers application-level security controls. For data residency and GDPR specifics, see Data Protection, or visit the Trust Center for the rest of our security and compliance documentation.
Running more than one office? See How Education Branch Operations Work for how this role-based access control and tenant isolation apply specifically across branches.