Security by Design. Isolated by Default.
Learn how Simplex protects mission-critical communications, protects customer PII, and guarantees multi-tenant boundary integrity.
Dedicated Tenant Cloud Isolation
Unlike multi-tenant systems that mix rows in shared tables with tenant_id filters, Simplex provisions a discrete, dedicated cloud partition for each organization. Hard cryptographic boundaries prevent cross-tenant queries.
AES-256-GCM Encrypted Credentials
Custom SMTP passwords, API secrets, and carrier gateway tokens are encrypted at rest using AES-256-GCM with authentication tags. Keys are managed through separate environment secrets.
TLS 1.3 Transport Encryption
All HTTP REST API traffic, webhook deliveries, and dashboard interactions are enforced through modern TLS 1.3 ciphers with strict HSTS headers.
Cryptographic API Key Scoping
API keys are generated with high entropy, salted, and previewed safely in the console. Requests validate through NestJS guard middleware before resolving schema contexts.
Asynchronous Queue Isolation
Redis BullMQ queues isolate message dispatches into distinct job wrappers, ensuring that heavy volume in one tenant cannot choke operational throughput for other organizations.
Comprehensive Audit Logging
Every dispatch event, sender profile modification, API key generation, and status change is immutably logged with timestamps and operator identifiers.
Multi-Tenant Cloud Architecture Deep Dive
Most SaaS messaging platforms store all customer messages in a single shared message pool and rely on software-level filter flags. A single query regression can leak customer messages across organizations.
Simplex avoids this entire class of vulnerability by assigning each tenant a unique, cryptographically isolated cloud boundary:
-- Cloud Partition Architecture Representation
PROVISION_TENANT_BOUNDARY "tenant_acme_corp_8912";
MOUNT_ISOLATED_TEMPLATES "tenant_acme_corp_8912";
MOUNT_ISOLATED_MESSAGES "tenant_acme_corp_8912";
When an API key is authenticated, the NestJS request context dynamically binds solely to that tenant's isolated boundary.
Responsible Disclosure Program
If you believe you have discovered a security vulnerability in Simplex, please contact our security team immediately.