Security Policy

Fidus360 is designed as a multi-tenant platform with security considered across authentication, access control, data isolation, and infrastructure. We follow industry security best practices and continue to strengthen our controls over time.

User accounts are protected by secure login. Passwords are stored using strong one-way hashing — never in plain text. Access within a workspace is governed by role-based access control, so users only see and do what their assigned role permits.

Each customer’s data is logically isolated within its own company workspace, so one tenant cannot access another tenant’s data through the application.

Data is transmitted over encrypted HTTPS connections. Application secrets and credentials are managed through secure environment configuration and are not exposed in client-side code.

Where applicable, key actions are recorded in audit logs to support accountability, troubleshooting, and security review.

Fidus360 does not store card numbers, CVV, or other sensitive card data. Payment processing is handled by our payment gateway or banking partner. We retain only payment status, order references, and invoice metadata. See our Privacy Policy for details.

Where applicable, we maintain backups to support recovery and business continuity. Backup retention is described in our Data Retention Policy.

For security questions or reports, contact us using the details below.