Security is not an afterthought in esimtida API. Our architecture is designed to protect tenant isolation, enforce identity rules, and secure sensitive data at rest and in transit.

Tenant Isolation (Multi-Tenancy)

esimtida isolates data at the application level. Every resource belongs to a specific project_id or team_id. Global middleware automatically scopes all eloquent queries to the currently authenticated active project, making accidental data leakage virtually impossible.

Data at Rest

• Passwords: Hashed using bcrypt/Argon2.
• API Secrets: Stored using AES-256-CBC encryption in the database.

Infrastructure Best Practices

esimtida is built on top of Laravel, utilizing best-in-class security features:

• Environment-based configuration isolation.
• Strict Content Security Policies (CSP) for the UI.
• Forced HTTPS/TLS 1.2+ for all API communication.