Security
Security is engineered in,not added on.
Medical field data deserves care. The AXORHYTHM platform is built with layered protections — from how people sign in to how every change is recorded.
Layers of protection
Five layers, working together.
- 01
Identity
- Passwords hashed with Argon2id
- Two-factor authentication (TOTP), mandatory for platform administrators and holders of sensitive permissions
- Account lockout and rate limits against guessing attacks
- 02
Sessions
- Random session tokens, stored only as SHA-256 hashes
- HttpOnly cookies on the web
- Supervised password recovery with a mandatory change of temporary passwords
- 03
Access
- Explicit per-user permissions, always checked on the server
- Nobody can edit their own permissions or grant permissions they do not hold
- 04
Isolation
- Strict company isolation, enforced in every database query
- Composite keys keep each company’s records bound to that company
- 05
Traceability
- An append-only audit log of sensitive changes
- Structured logs with secrets redacted
- Web security headers, a content security policy and cross-site request protection
This website
The same care, here too.
Independent
This website runs separately from the AXORHYTHM platform and shares none of its systems.
No tracking cookies
We do not use advertising or tracking cookies.
Strict content policy
Every page ships with a strict content security policy and hardened headers.
Minimal data
The contact form asks only for what we need to reply to you.
Contact
Let’s talk.
Whether you are exploring our medical field-force platform or want to learn more about AXORHYTHM, we would be glad to hear from you.