Security Architecture

Engineered to protect your intellectual property and project data.

Infrastructure & Hosting

EEP operates on a modern, decoupled architecture designed for high availability and strict security. Our API is served via Fastify REST protocols, while static assets are globally distributed via Edge networks.

Authentication & Row-Level Security (RLS)

User identities are managed through Supabase Auth. We utilize short-lived JWT (JSON Web Tokens) that auto-refresh. At the database layer, strict Row-Level Security (RLS) policies are enforced. Your project data (e.g., circuits, load models, deficiency notes) is cryptographically bound to your specific Organization ID and User ID.

Role-Based Access Control (RBAC)

EEP features a granular permission system tailored for construction workflows. Access to engineering calculation engines is gated by role: