Security & trust
Isolation, access control and auditability live in the data layer.
Security posture that is implemented per module is only as strong as the module that forgot. Planet B2B enforces tenancy, access and audit beneath the modules, so every capability inherits the same guarantees by construction rather than by discipline.
How it is enforced
Database-level tenant isolation
Tenant separation is enforced with PostgreSQL row-level security at the data layer. A query that forgets its tenant filter returns nothing rather than someone else's rows.
Hybrid RBAC / ABAC
Role-based access for the common case, attribute-based access for the cases that matter — clearance levels, scopes and record attributes evaluated together.
Data classification tiers
Documents and records carry a classification, and handling follows the classification across every module that touches them.
Immutable audit trail
An append-only event log spans every module and action. Entries are written, never rewritten, so the trail is tamper-evident rather than merely present.
Field-level encryption and HSM
Available for dedicated-cloud and on-premises deployments, with customer-managed or HSM-backed keys.
Enforced platform invariants
Ten platform invariants — tenant context, route wrapping, audit-critical paths and others — are documented and gated in CI. A change that violates one does not merge.
Compliance posture
The platform is compliance-configurable rather than certified against a fixed list. We state posture honestly: the controls below are implemented and configurable, and we will walk your assessors through them.
GDPR / RODO
Configurable controls
SOC 2
Readiness
ISO 27001
Aligned controls
NIS2
Configurable controls
Where a framework says readiness or aligned, it means the controls are implemented and evidence is available — not that a certificate has been issued. Ask us for the current status before it goes in a bid.
Bring your programmes into one auditable environment.
Tell us about your programme, your sovereignty constraints and the tools you are trying to retire. We will show you what a first module looks like.