Back to Construct-O-Genie
SECURITY ARCHITECTURE

Enterprise Security & Data Governance

Construct-O-Genie is engineered with defense-in-depth architecture to safeguard proprietary commercial tender rates, supplier contracts, and financial ledgers.

Data Encryption Standards

All network traffic is encrypted using TLS 1.3 with forward secrecy. All project databases, tender rates, and attachments are encrypted at rest using AES-256 with managed KMS keys.

Role-Based Access Control (RBAC)

Granular permission boundaries enforce strict segregation of duties. Site supervisors cannot alter tender baseline rates, and purchase managers cannot issue high-value POs without multi-tier director sign-off.

Immutable Audit Trails

Every rate change, GFC drawing revision takeoff, purchase order approval, and JMR measurement modification is permanently logged with user ID, IP address, and cryptographic timestamp.

AWS Asia Pacific (Mumbai) VPC

Enterprise data is hosted in dedicated Virtual Private Clouds (VPC) in ISO-compliant AWS Mumbai data centers with automated multi-zone failover and DDoS protection.

Automated Daily Backups & Disaster Recovery

Point-in-time recovery (PITR) with automated daily snapshot backups. Redundant database replication guarantees business continuity for mission-critical fit-out operations.

Secure ERP & Accounting Connectors

Integrations with Tally Prime and SAP utilize authenticated, encrypted local connectors and scoped API tokens with zero public exposure of accounting credentials.

Security Vulnerability Disclosure

For security advisories or penetration testing reports, please contact our SecOps team.

Contact SecOps Team