Security — iRescue.life

iRescue.life is built with security and data isolation as first-class concerns. Every tenant’s data is logically isolated and encrypted in transit.

Data Isolation

All tenant data lives in a shared PostgreSQL database with tenant_id row-level filtering applied to every query. No tenant can access another tenant’s data.

Authentication

bcrypt password hashing (no plain-text passwords stored)
TOTP multi-factor authentication for platform administrators
Token-based password reset with short expiry windows
Role-Based Access Control (RBAC) with tenant-scoped permissions

Data Protection

All data in transit encrypted via TLS 1.2+
Daily automated PostgreSQL database backups to Google Cloud Storage
Daily automated tenant file backups to Google Drive
Object storage files served through signed URLs with expiry