Role-based.
Fully customisable.
Orchestrator's access model is built around configurable roles — each defining exactly which modules, actions, and data a user can reach. Roles are not fixed labels: permissions are scoped per deployment, per location, and per module, so every operation gets the access model that fits its structure.
- Multiple role tiers from full platform access down to read-only portal users
- Module-level permission overrides per role
- Location-scoped visibility — users see only data relevant to their assignment
- Dynamic navigation — sidebar and routes adapt to the user's role automatically
- Expandable role structure — add tiers as your operation grows
Illustrative — every permission is configurable per role and deployment.
Log every interaction.
Your way.
Because the AI Flow Engine connects to every event in the platform, you can attach custom logging to any interaction — contact updates, API calls, form submissions, booking changes, order events — capturing exactly the fields your compliance, audit, or operational requirements demand.
- Trigger a log entry on any platform event — create, update, delete, view
- Capture actor identity, IP address, timestamp, entity, and field-level diffs
- Write logs to the internal database, an external API endpoint, or both simultaneously
- Chain with alert flows — notify on sensitive actions in real time
- No separate logging infrastructure — runs inside the existing async job queue
Defense in depth.
At every layer.
Security is not a module or an add-on. It is built into every layer of the platform — from the request boundary to the database row.
Token Authentication
API access is secured through scoped bearer tokens with configurable expiry and instant revocation. Every inbound webhook endpoint carries its own unique, auto-generated token — independently revokable.
AES-256 Encryption
All sensitive data — credentials, API tokens, configuration secrets — is encrypted at rest using AES-256-CBC. No plaintext secrets exist in the database, environment, or log files.
CSRF Protection
Every state-changing request is protected by cryptographic CSRF tokens, verified server-side on submission. Cross-site request forgery is structurally blocked at the request boundary.
Rate Limiting
Configurable rate limits on all API routes and authentication endpoints. Brute-force and credential-stuffing attacks are throttled before reaching application logic.
Password Hashing
All user passwords are hashed using bcrypt with a configurable work factor. Plaintext passwords are never stored, logged, or transmitted at any point in the system.
SQL Injection Prevention
All database interactions use parameterised queries and a strict query builder — raw SQL is never constructed from user input. Injection attacks are structurally impossible at the data layer.
XSS Protection
All output is automatically escaped before rendering. User-supplied content cannot inject executable scripts into the interface. Content Security Policy headers enforce the browser-side boundary.
Signed & Expiring URLs
Sensitive routes — file downloads, verification links, password resets — are protected by cryptographically signed URLs with configurable expiry. Tampered or expired links are rejected server-side.
Middleware Pipeline
Every request passes through a layered middleware stack — authentication, authorisation, role validation, rate limiting, and input sanitisation — before reaching any application logic.
Secure Session Handling
Sessions are encrypted and signed server-side. Cookies carry HttpOnly, Secure, and SameSite=Strict attributes. Session fixation is blocked on every authentication event.
Location Data Scoping
Data visibility is enforced at the query level — users can only retrieve records belonging to their assigned locations, regardless of the endpoint or interface used to make the request.
Route-Level Module Locking
Disabled modules are locked at the route level — not just hidden in the UI. An unauthorised user cannot reach a disabled module's API endpoints even with a valid authentication token.
Manage users.
Control access.
Create, edit, and manage user accounts with role assignments. Soft-delete users and restore them when needed. Use the Log As feature to impersonate another user for troubleshooting and support.
- Create and manage user accounts with role assignment
- Soft-delete and restore users without data loss
- Log As — impersonate users for troubleshooting
- Super Admin accounts hidden from non-Super Admin lists
- Company and customer association per user
Deploy exactly
what you need
Every module can be enabled or disabled per deployment. Disabled modules are fully locked — routes, APIs, and UI simultaneously. Expand at any time without re-deployment.
Security that scales
with your operation.
Customisable roles, location scoping, module toggles, flow-powered logging, and deep platform security — enterprise-grade without the enterprise overhead.