Secure by design

Trust is easier to keep when the system is built for it.

Avior is being built as a real multi-tenant SaaS platform from day one, with security and auditability treated as product features.

Security principles behind the platform.

These are the foundations we use while designing Avior FieldOps Platform and Avior AxleGrid.

T

Tenant isolation

Every tenant-owned workflow is designed to carry tenant context through queries, storage paths, notifications, and audit events.

A

Accountable access

Meaningful admin, support, and user actions should leave a clear event history that can be reviewed later.

S

Safe public links

Customer location links are designed to be short-lived, purpose-specific, and separate from staff-only data.

Operating controls

Practical controls for serious field operations.

Secrets Secrets and connection strings belong in managed secret storage, not in code or public documentation.
Evidence Evidence photos should be private, tenant-scoped, size-controlled, and stored with retention rules.
Monitoring API health, storage failures, notification issues, and public-link abuse need clear alert paths before paid usage.
Release discipline Change history, environment records, and verification evidence are maintained as part of the delivery process.