Security
EventOpsly is designed with layered security — authorization, tenant isolation, and infrastructure controls.
- PostgreSQL row-level security for tenant isolation
- Application authorization for business access control
- Browser security boundary via BFF with HttpOnly session cookies and CSRF protection
- Private object storage with tenant-scoped access patterns
- Transactional outbox for reliable asynchronous delivery
- Production-oriented headers including CSP and HSTS in deployed environments
Security posture is validated through automated regression tests and staging certification gates. Contact support@eventopsly.com for security inquiries.