Security controls &
data protection at Optruss.
We document the controls currently implemented in Optruss and distinguish them clearly from planned capabilities and customer-specific deployment options.
Core security safeguards implemented today
Security controls built into our platform architecture, infrastructure operations, and internal engineering processes.
Authentication & SSO
Supports industry-standard SAML 2.0 and OIDC single sign-on, multi-factor authentication (MFA), and session management controls.
Access Management
Role-based access control (RBAC) enforcing principle of least privilege across company, facility, and functional units.
Encryption Standards
Data in transit protected by TLS 1.3/1.2; data at rest encrypted using AES-256 with managed cryptographic key lifecycles.
Backup & Redundancy
Automated incremental and daily database snapshots with cross-region replication options and verified recovery point objectives.
Continuous Logging
Centralized immutable audit logs tracking user authentications, data exports, work order sign-offs, and administrative changes.
Vulnerability Management
Routine static application security testing (SAST), software dependency vulnerability scanning, and periodic third-party reviews.
Enterprise cloud or air-gapped sovereign edge
Optruss recognizes that industrial facilities and national infrastructure demand tailored deployment topologies to meet regulatory and security mandates.
Security architecture built for mission-critical operations.
Connect with our engineering and security team to review our architecture, inspect audit summaries, or discuss deployment options.