Skip to content
Security by design

Trust is the product

Synx Connect is built for regulated, sensitive consultations from day one — every layer designed to keep client data isolated, private and accountable.

Role-based access control

Every protected route enforces RBAC and organization scoping. Data never crosses tenant boundaries.

Expiring join links

Join links are random tokens; only their SHA-256 hash is stored. Links expire a few hours after the appointment ends, and rotate on every reschedule.

Encryption & secrets

Secure httpOnly session cookies (signed JWTs), hashed passwords (bcrypt), one-time tokens stored only as hashes — never in plaintext.

Signed file access

Files live in a private bucket. Upload and download happen only through short-lived signed URLs.

Audit & consent

Sensitive actions are written to an append-only audit log. GDPR consents are recorded with timestamp and IP.

Rate limiting

Authentication and join endpoints are rate-limited to resist brute force and abuse.