Enterprise security
Manage customer, project, cost and quote data inside explicit access boundaries.
Manufacturer, dealer and user scope is enforced in the service and data layers, not just in the interface. Sensitive manufacturing cost remains available only to authorized manufacturer users.
- 01Server-enforced access scope
- 02Dealer data isolation
- 03Field-level encryption
- 04Audit and change records
01Access and data boundaries
Keep factory cost with the manufacturer and dealer data with each dealer.
A dealer cannot read another dealer’s customers, projects or quotes. Raw cost and manufacturer margin are not part of dealer-facing data responses.
- 01
Manufacturer admin, dealer admin and member roles
- 02
Server-derived dealer scope
- 03
Row-level data isolation
- 04
Manufacturer-only cost access
02Identity and sensitive data
Protect sessions and personal data at separate layers.
Central identity, secure session cookies and field-level encryption prevent sensitive customer and employee information from being exposed as ordinary application data.
- 01
Central OIDC identity
- 02
Session tokens kept out of browser JavaScript
- 03
Encrypted sensitive fields
- 04
Customer export and anonymisation
03Secure external sharing
Open the project to a customer without opening commercial or personal data.
The customer link does not reuse an authenticated application screen. It carries a separate, trimmed and read-only scene model with only the data required for 3D viewing; prices, cost, customer details, notes, BOM and export surfaces stay out.
- 01
Server-controlled lifetime from one hour to 30 days
- 02
Optional password and immediate revocation
- 03
View separated from price, cost and personal data
- 04
Company setting to anonymise team-member names
04Records and quote integrity
Preserve critical changes and issued quote history.
Price-effective actions and privileged access are recorded. Issued quote versions cannot be rewritten; changes move forward as revisions.
- 01
Append-only audit records
- 02
Change and rollback history
- 03
Non-rewritable quote versions
- 04
Conflict protection for concurrent changes
Continue through the process
Explore the other parts of Coldsolve.
Treat security as part of the product model, not a later setting.
Review exactly what manufacturer and dealer users can access in a live product scenario.