VectorKan
Security architecture & data governance
Security Architecture
VectorKan is engineered with defense-in-depth principles:
- HTTPS & Transport Layer Security: All web traffic and API calls require TLS 1.2+ encryption in transit. HTTP requests are redirected to HTTPS automatically.
- HTTP Security Headers: VectorKan enforces modern security headers aligned with STQC and CERT-In guidelines:
Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policyprotecting against XSS and clickjacking.
- Authentication Security: Passwords are hashed using ASP.NET Core Identity's PBKDF2 with HMAC-SHA256 and unique cryptographic salts.
- Two-Factor Authentication (2FA): Time-based One-Time Password (TOTP) 2FA is supported for all accounts.
Multi-Tenant Data Isolation
All workspace entities implement the ITenantScoped interface. Entity Framework Core enforces global query filters at the database layer ensuring queries can only return records matching the active TenantId. Cross-tenant leakage is architecturally blocked.
More guides in Security & governance
Learn how VectorKan ensures complete data separation between different customer organizations at the database and application layers.
Configure password policies, session security, lockout thresholds, and two-factor authentication (2FA).
Details on TLS encryption, cipher suites, HSTS preloading, and CSP protection across VectorKan web and API endpoints.
Learn how production database backups, point-in-time recovery, and multi-zone persistence protect your workspace against data loss.
Learn what happens when an account or workspace is deleted, data purge timelines, and retention rules.