Tenant isolation enforced in the database
Every row is bound to a tenant, and Postgres row-level security is FORCE-enabled. Isolation is proven by test, not promised by convention.
Security
What we actually enforce
Every control listed here exists in the platform today. Controls we do not provide are not claimed anywhere on this site: no certifications are claimed, and there is no production hosting yet, so no SLA is quoted.
Enforced controls
Proven by test, not promised by convention
Tamper-evident audit trail
Every administrative and read action lands in an HMAC-chained, append-only audit log. Chain verification detects tampering, including tampering by the database itself.
Least privilege everywhere
Read-only Graph permissions. Database roles split so the runtime cannot alter its own security policies. Secrets file-mounted, never in code.
Hardened SPA
Strict Content-Security-Policy, Trusted Types, pinned Graph origins, ReDoS and prototype-pollution guards.
Rate limiting
Applied per principal and per tenant, and verified by test.
Encrypted, drilled backups
Restore is rehearsed, not hoped for.
Architecture
Built as a real multi-tenant platform
No agents, nothing installed. VisualizerEngine mirrors your directory through read-only Microsoft Graph calls and serves it back as structure you can interrogate.
Sign in with Entra ID
No passwords, no separate accounts. Multi-tenant consent, and onboarding is an admin-consent link.
Read-only by design
It can see everything and touch nothing. The platform asks for Group.Read.All, User.Read.All, and Organization.Read.All. Nothing more. It cannot modify your directory.
Continuous sync
A full crawl establishes the mirror. Microsoft Graph delta queries keep it current, including correct handling of deletions.
Role-based access
Viewer, Analyst, Admin, and Auditor roles, enforced server-side.
A mirror, not a proxy
Your directory is mirrored into per-tenant storage, so exploration, analytics, and simulation run against the mirror at interactive speed.
Verified at scale
Performance-verified at 50,000 groups and 250,000 memberships, with keyset pagination that does not degrade with depth.
See your directory's real shape
VisualizerEngine is pre-launch. Onboarding is a read-only admin-consent link: no agents, nothing installed, nothing modified.