Attendance and HR systems are a goldmine of sensitive information. They contain employees' personal data, their habits, medical interruptions, and payroll connections. In an era where cyberattacks are increasing at an exponential rate, a basic password is no longer enough. ENEXI approaches security at multiple independent levels (Defense in Depth).
Encrypting data at rest and in transit
The first pillar of our security is encryption. All communication between your browser (or hardware terminal) and our servers is protected using the latest generation TLS (Transport Layer Security) protocol. This means that data is unreadable to any third party while transiting the internet.
Data is also protected "at rest" directly in our databases using strong encryption algorithms (AES-256).
Access Control (RBAC) and Authentication
System security often fails due to the human factor. Therefore, ENEXI implements strict Role-Based Access Control:
- Granular rights: An ordinary employee, a department head, and a payroll accountant see only the data they strictly need for their work. Nothing more.
- Single Sign-On (SSO) Support: We support integration with corporate identities (Microsoft Entra ID, Google Workspace), which means access to ENEXI is managed by your internal IT administrators within your security policies.
"Security is not a one-time project, but a continuous process. Our systems are regularly updated and monitored against vulnerabilities according to OWASP standards."
DDoS protection and automatic monitoring
Our infrastructure is protected against Distributed Denial of Service (DDoS) attacks and network anomalies. We use advanced firewalls and constant 24/7 application monitoring, which automatically detects suspicious activities and blocks unauthorized access attempts.
