Your data, locked down.
Elir is built for teams that handle sensitive revenue, CRM, and financial data. Security isn't a feature we bolted on — it's how the platform was designed from day one.
Encryption everywhere
All data in transit is encrypted with TLS 1.3 (HTTPS). OAuth credentials and API keys are encrypted at rest using AES-256-GCM before they ever touch disk. We never store tokens in plaintext.
Per-tenant database isolation
Each customer organization gets its own dedicated PostgreSQL database. Your data is never co-mingled with other customers’ data — not in the same table, not in the same database, not even in the same schema.
Modern authentication
Passwords are hashed with argon2id (the current gold standard). Sessions use short-lived JWT access tokens signed with RS256 (2048-bit RSA), paired with secure httpOnly refresh cookies. No session data is stored in localStorage.
Role-based access control
Custom roles with per-page view/edit/none permissions let you control exactly who sees what. System default roles (Admin, RevOps Manager, Marketing Analyst, Sales Manager, Viewer) are created for every new organization.
Dedicated infrastructure
Elir runs on dedicated hardware, not shared cloud VMs, behind a strict firewall that exposes only the HTTPS and administrative ports required to operate the service.
Hardened server
Root SSH login is disabled. Password authentication is disabled — key-only access. Automatic security updates apply upstream patches on release, and repeated authentication failures are blocked automatically.
Daily encrypted backups
Full database backups run automatically every night, compressed, and retained for two weeks. Restore procedures are tested regularly and complete in minutes.
No tracking inside the application
The authenticated Elir application runs no third-party tracking scripts — no Google Analytics, Facebook Pixel, Hotjar, or session recorders. The only cookie the app sets is a secure, httpOnly authentication token. Our public marketing site uses Google Analytics to measure content performance; no analytics run behind the login.
Infrastructure overview
| Server type | Dedicated hardware, not shared VMs |
| Database | PostgreSQL with per-tenant isolation |
| Transport security | TLS 1.3 with automatic certificate renewal |
| Credential encryption | AES-256-GCM |
| Password hashing | argon2id |
| Token signing | RS256 (2048-bit RSA) |
| Monitoring | Automated patching and intrusion prevention |
| Backups | Nightly, encrypted, two-week retention |
Questions?
If you have security questions, need details for a vendor assessment, or want to report a vulnerability, contact us at anatolii@thescimus.com. We respond to security inquiries within one business day.