Security and operation# Security and operation This page describes the actual controls and operating responsibilities. It constitutes neither a certification nor a guarantee of automatic conformity. ## Trust model The organization is the multi-tenant border. Repositories filter lists, checkers search for each relationship in the current tenant, and a foreign resource is usually hidden with a 404 response. The frontend adapts the display to the roles, but the Symfony API makes all the security decisions. ## Authentication - Argon2id passwords via Sodium; - Signed JWT lasting 15 minutes; - refresh rotating token in HttpOnly cookie; - consultable and revocable server sessions; - Optional TOTP MFA with one-time backup codes; - progressive locking after failures; - account recovery by single-use token valid for 30 minutes. After a password reset, existing sessions are invalidated. ## Permissions The general hierarchy is `SUPER_ADMIN → ADMIN → RISK_MANAGER → VIEWER`. The Auditor and Action Manager roles
RiskPilot
Website
FR
GitHub