Our approach
Security isn't a checklist we ran once — it's structural to how the platform is built. This page describes the real, currently-implemented measures, not aspirational claims.
Tenant data isolation
Every tenant-scoped table is filtered by an automatic query scope tied to your tenant — there's no code path that "forgets" to isolate a tenant's data. Crossing that boundary requires an explicit, separately audit-logged action, reserved for platform administration.
Access control
A strict role hierarchy (root admin → superadmin → unlimited custom roles) with a hard delegation rule: no role can ever be granted a permission its creator doesn't already hold, enforced server-side.
Activity logging
Actions taken within the platform are recorded in an activity log. Sensitive platform-level entries are visible only to platform administrators, never to a tenant's own staff.
Application security
Passwords are hashed, never stored in plain text. Forms are protected against cross-site request forgery. File uploads are validated by type and size. Sensitive endpoints (login, OTP verification, public form submissions) are rate-limited against abuse.
Responsible disclosure
If you believe you've found a security vulnerability in ManRiq Technologies PVT. LTD., please report it to us via our Contact page rather than disclosing it publicly. We take these reports seriously and will respond promptly.