Trust is the product
Synx Connect is built for regulated, sensitive consultations from day one — every layer designed to keep client data isolated, private and accountable.
Role-based access control
Every protected route enforces RBAC and organization scoping. Data never crosses tenant boundaries.
Expiring join links
Join links are random tokens; only their SHA-256 hash is stored. Links expire a few hours after the appointment ends, and rotate on every reschedule.
Encryption & secrets
Secure httpOnly session cookies (signed JWTs), hashed passwords (bcrypt), one-time tokens stored only as hashes — never in plaintext.
Signed file access
Files live in a private bucket. Upload and download happen only through short-lived signed URLs.
Audit & consent
Sensitive actions are written to an append-only audit log. GDPR consents are recorded with timestamp and IP.
Rate limiting
Authentication and join endpoints are rate-limited to resist brute force and abuse.