Security

Your Farm Data, Protected

Security is not an afterthought at AgriAdvisor. Every layer of our platform is built with data protection, privacy, and trust at its core.

Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Database backups are encrypted and stored in geographically redundant locations.

Tenant Isolation

Each organisation's data is strictly isolated. No farmer can access another farmer's records, scans, or advisory history. Cross-tenant access is technically impossible.

Authentication

We support email verification, TOTP-based two-factor authentication, and SMS OTP. All authentication decisions are enforced server-side with deny-by-default principles.

Audit Logging

All high-risk actions are logged with immutable audit trails. This includes logins, data access, advisory approvals, and administrative changes.

Role-Based Access

The platform enforces strict role separation between Farmers, Agronomists, Vendors, and Administrators. Roles are mutually exclusive where required by policy.

Vulnerability Management

We conduct regular security assessments and dependency audits. Our pre-commit hooks include security checks, and our CI pipeline enforces security gates.