Multi-tenant native
Security and compliance, designed in
Alexus was built for organizations that operate at scale and need to prove it on demand: every tenant isolated, every change to your estate audited, every credential encrypted.
No bolt-on retrofits, no "check back next quarter" for SOC pre-reqs. The isolation primitives ship in every release.
Postgres Row-Level Security
Every tenant table enforces RLS. JWT tenant_id is extracted at the request edge: no leaks, no shared state.
Fernet credential encryption
Vendor credentials are wrapped in Fernet AES-128-CBC + HMAC-SHA256, with keys loaded from settings, rotation support, and a separate key for the personal-data vault.
Tenant-scoped graph + cache
Redis key prefixing and Neo4j Lucene `_tenant_token` filtering scope every graph and cache query to the tenant, and automated tests check that scoping.
Full audit chain
Every CREATE/UPDATE/DELETE on audited entities is logged with actor, source, and timestamp. User activity events are queryable end-to-end.
NIS2 compliance reporting
Change records, incident outcomes, and the audit chain are wired together so NIS2 reports are a query, not a quarter-long project.
GDPR right-to-erasure
First-class workflow for data subject requests. Embeddings, audit entries, and graph nodes are all part of the cleanup, not just the rows in Postgres.