Security
Security you can defend to your CISO
Evrondesk is built multi-tenant from day one, with RLS on every table, MFA-gated admin actions and audit trails everywhere.
- IP allowlists at the workspace level
- Password policy configurable per org
- Session and device management
- Data export & deletion on request
Encryption
TLS in transit, encryption at rest for the database and object storage.
MFA on sensitive actions
Super-admin actions require a fresh MFA challenge.
Row-level security
Every table's policies scope reads and writes to your org.
Auth abuse detection
Automatic lockouts after suspicious sign-in patterns.
Audit logs
Every admin action recorded with actor, target and details.
Edge hosted
Runs on Cloudflare workers; global, fast, DDoS-resilient.
RBAC
Roles for members, admins, developers and support staff.
Security headers
HSTS, CSP, XFO, referrer and permissions policies on every response.