Security Architecture
How we protect your corporate identity using modern, enterprise-hardened infrastructure.
Native ASP.NET Core MVC
Unlike fragile client-side SPAs, Signature Studio is a 100% Native ASP.NET Core application. Authorization, entitlement logic, and data validation are executed exclusively on secure servers, making it impervious to client-side manipulation.
Strict Tenant Isolation
Our architecture eliminates Insecure Direct Object References (IDOR). Every database query is strictly scoped to the authenticated user's active `OrganizationId`. It is mathematically impossible to accidentally fetch or mutate data belonging to another tenant.
Cryptographic Protection
- Passwords: Hashed and salted automatically using ASP.NET Core Identity's PBKDF2 implementation.
- Cookies: Anti-forgery (CSRF) tokens are strictly validated. Authentication cookies are marked `HttpOnly` and `SameSite=Strict`.
- Transport: Forced TLS/HTTPS with HSTS headers ensures man-in-the-middle attacks are blocked.
Generative AI Security
AI requests are validated server-side: the model can only propose a short list of allowed design changes, each checked against strict ranges before anything is applied, and it only ever sees design settings (never personal data). The AI engine runs locally on our servers, so no data is sent to third-party AI providers.