Security and data

Each concession only sees its own data

ROIS is multi-tenant: every piece of data — every work order, intervention, accident, budget — belongs to a specific concession. That isolation isn’t just a design promise: it’s checked by automated tests that try to read and modify another concession’s data before every release, and confirm the platform rejects them.

Role-based access

Every user has an assigned role, and that role decides what they can see and change on each screen: who can validate an intervention, who can only view it, who works from the tablet on the road. Passwords are stored as a hash (bcrypt), never in plain text or in a reversible form, and sessions are handled with access tokens.

Where the data lives

The database runs on MongoDB Atlas. Photos and other files uploaded by crews from the tablet are stored in Hetzner Object Storage, in a data centre in Falkenstein, Germany — within the European Union.

Service continuity

Every production deployment is automatically mirrored to a standby infrastructure with separate compute — it shares the same database, it isn’t an independent copy of the data — with a health check that leaves a visible record if that standby falls out of sync.