EcofyxAccess and permissions
Accounts, members and operations have their own scopes. Sensitive actions are validated again on the server.
Security
Security applied to real platform use.
Ecofyx combines authentication, account- and operation-level permissions, protected sessions, server-side validation and specific controls for public pages and links.
Core security controls
Security controls are applied according to the context of the account, operation, form and public access flow.
Public links and pages
Public and temporary links have limited scope. Customer public pages and tracking pages are not submitted to search engines for indexing.
Uploads and evidence
Files pass validation and are stored through protected flows. Images intentionally used on public pages are reduced and re-encoded before use.
Session protection
Ecofyx uses protected session cookies, CSRF controls in authenticated flows and security headers.
Data and history
Operational records remain tied to the account, permissions and operation context.
Backups and monitoring
The operating model includes backup routines, readiness checks, technical logs and availability monitoring.
Use public access only when the routine requires it
Keep permissions, links and collected data aligned with the real operational need.
Start free