Security & compliance
Compliance is the architecture, not a checkbox
Susceptio is built for the reviews your security and compliance teams run. Every control is enforced in the engine — database, storage, identity — not bolted on as a feature.
Security controls
Encryption at rest & in transit
TLS 1.2+ for all traffic. Data at rest is AES-256 encrypted in Azure Storage. Customer-managed keys (BYOK) via Azure Key Vault — envelope encryption with per-tenant data keys, you control the keys — is on the Enterprise roadmap.
Row-Level Security (multi-tenant isolation)
Every table carries a tenant_id. Postgres Row-Level Security enforces isolation at the database engine — a query that omits tenant_id returns zero rows by construction, not by convention. The application connects as a role with no BYPASSRLS.
Immutable, append-only audit trail
Every state-changing event — form loaded, file uploaded, file accessed, file downloaded, email sent — is written to an append-only audit_log table. No exceptions. Logs are exportable for auditors and regulators on demand.
Mandatory MFA, no custom auth
Staff authentication is Azure Entra ID exclusively. No custom authentication or session management, no shared passwords. MFA is required for every staff login — enforced by Conditional Access policies. Client access ranges from invite-only to fully anonymous, configurable per tenant.
Zero-trust file handling
All uploaded files are treated as hostile. Every file is scanned before it is marked available for staff download or synced to SharePoint/OneDrive. Infected files are quarantined and never delivered.
Resumable, multi-part uploads
No synchronous base64 or single-request uploads. All file uploads use multi-part uploads with Azure Blob SAS tokens — resumable across dropped connections, built for large client packages, not email-sized attachments.
Secrets management
No secrets in code or environment variables. All secrets, API keys, and connection strings live in Azure Key Vault exclusively, with audited access.
Infrastructure as Code
Every infrastructure resource is defined in Terraform — no manual console provisioning. Reproducible, reviewable, and auditable from day one, with remote state and locking.
Secure at the foundation. Effortless at the surface.
One Azure custody chain — compute, storage, database, identity — from upload to delivery, with no fourth parties in the path. And every layer above it was designed around the two people it serves: easy for your clients, structured for your team.
Replace your intake stack with one audit-ready system
See Susceptio live with your own branded tenant. We'll have a sandbox ready in under a business day.