1. Cryptographic Multi-Tenant Isolation & Row-Level Security
Lezore operates a modern multi-tenant cloud architecture where every data point is strictly bound to your Organization ID.
All database transactions and API endpoints enforce cryptographic tenant validation before execution, preventing any possibility of cross-organization data leakage.
Financial numbers, contractor profit margins, and global worker base rates are stripped server-side before response dispatch to site supervisor mobile devices.
2. Encryption at Rest, In Transit & Field-Level
We enforce modern cryptographic standards across the entire application lifecycle:
- In Transit: All HTTP and WebSocket traffic is protected via Transport Layer Security (TLS 1.3) with perfect forward secrecy and HTTP Strict Transport Security (HSTS).
- At Rest: Databases, document archives, and automated daily snapshots are encrypted using AES-256 bit keys managed by enterprise cloud Key Management Services (KMS).
- Sensitive Identity Fields: Bank account numbers and government identity identifiers (Aadhaar/PAN) are encrypted and masked before persistence.
3. Offline PWA Cryptography & Sync Deduplication
Construction sites frequently face poor 2G/3G connectivity. Lezore integrates a secure offline Progressive Web App (PWA) engine:
Offline attendance marks are cached in client-side encrypted browser IndexedDB storage. Each sync payload utilizes idempotent UUID transaction tokens to prevent duplicate attendance marks or false wage accruals when network reconnects.
4. 100% Indian Cloud Data Residency (AWS Mumbai)
To ensure complete compliance with Indian data sovereignty guidelines, RBI payment norms, and the Digital Personal Data Protection Act (DPDPA) 2023, all primary databases, application clusters, and cold storage backups are hosted in Tier-IV enterprise facilities located within the AWS Asia-Pacific Mumbai Region (ap-south-1).
5. Immutable Audit Trail & Operational Logging
Trust requires total transparency. Every critical operational event—including worker salary rate revisions, site transfers, advance allocations, role permissions, and monthly payroll finalizations—generates a permanent, timestamped audit entry.
Organization owners can inspect complete historical change logs anytime directly from Settings > Audit Log.
6. Automated Backups & Disaster Recovery
We maintain comprehensive business continuity and disaster recovery safeguards:
- Daily Automated Snapshots: Encrypted multi-zone database snapshots with point-in-time recovery capabilities.
- 1-Click Backup Hub: Admins can instantly export full JSON/CSV archives of worker rosters, attendance, and advance ledgers.
- 99.99% Cloud Uptime SLA: Multi-AZ high-availability server clusters designed to withstand regional cloud disruptions.
7. Responsible Vulnerability Disclosure & Safe Harbor
We welcome vulnerability reports from independent security researchers and white-hat community members. If you discover a potential vulnerability in Lezore, please disclose it responsibly: