A straightforward account of how data is isolated, who can access what, and where it's hosted.
Every company gets its own database schema. Your guards, sites, payroll and client data live in storage no other company's queries can ever reach — this is enforced at the database level, not just in application code.
Office staff get role-based permissions; guards and supervisors get permissions from their HR department. Both are checked on every request against the same permission system — there's no separate, weaker access path for either.
Who created, edited or deleted a record, and when, is logged for every meaningful action — not just for compliance, but so your own team can answer "who changed this?" without guessing.
Every connection to AfriSecSys is encrypted with TLS. There is no unencrypted path to log in or view data.
Temporary and reset passwords must be changed before any other page is accessible — an account can't sit indefinitely on a password someone else set for it.
Uploaded IDs, certificates and contracts are stored separately from public assets like your logo, and are only ever served to an authenticated, authorized user.
AfriSecSys is hosted on infrastructure operated by Optinet Global Links. Passwords are never stored in plain text — they're hashed with a modern, industry-standard algorithm designed to resist brute-force attacks even if the underlying data were ever exposed.
AfriSecSys has not undergone a third-party security audit or formal certification (e.g. SOC 2, ISO 27001) at this stage. If your organization requires that as part of a procurement process, get in touch and we'll discuss it directly and honestly rather than overstate where we are.
See our Privacy Policy for what's collected and why, or reach out directly.
Contact Us