portierX keeps each organisation's data apart and checks on every request what a user may do. This page is written for IT, data protection and procurement, and for the Organisation Admin who answers their questions.
Also called: tenant isolation, data security, information security, security concept.
The organisation boundary
Every record belongs to exactly one organisation: people, keys and cards, spaces, connections, the audit log. portierX reads and writes it only for that organisation. Someone who works in several organisations always works in one of them and sees only its data; see Work in several organisations with one login.
Permissions on every request
On every request, the portierX server checks which permissions the user's role holds in the organisation they are signed in to, before it reads or changes anything. What each role may do is on What your role lets you see and do.
Signing in with the company account
Organisations with Microsoft Entra ID sign their users in with their company account and can require that sign-in for everyone. Password rules and multi-factor sign-in then apply as your IT sets them in Entra ID. The set-up is on Set up single sign-on with Microsoft Entra ID.
Checks before any email
Before portierX sends an email, it checks the address: it must be valid, its domain must accept mail, and throwaway mail services are refused. No internal identifier of your organisation is written into the email's headers.
Encryption with a key of your own
The credentials portierX stores for your connected systems and for the sign-in with your company account are encrypted with a key that belongs to your organisation alone. That key is in turn protected by a separate master key.
Where portierX runs
portierX is hosted in the EU, in Germany and France, and keeps each customer's data separate.
ISO/IEC 27001
portier is certified to ISO/IEC 27001. portierX is developed, delivered and supported under that certification. Its scope is the development, delivery and support of portier's lock and access management solutions, both cloud-hosted and on-premise. The certificate and its documents are available from the portier Trust Center.
Rules
Every record belongs to exactly one organisation. A user only ever sees the organisation they are working in.
What a role may do is checked by the server on every request, not only by the screen.
portier holds the certificate as a company. Its scope includes portierX.