Platform · Security

Security & Access Controls

Security controls are built into SAMFCore at the application and administrative levels, while infrastructure security can be configured according to the requirements of each deployment.

Native application and administrative controls support regulated financial operations. Encryption, resilience, monitoring and availability are configured at the deployment and infrastructure layers.

Encryption
MFA
Audit
RBAC
Section 1

Security Principles

Role-Based Access Control

Granular permissions for every operator role.

Customer Authentication

Two-factor authentication for customer accounts.

Deployment Encryption

Encryption in transit and at rest can be implemented at the deployment and infrastructure layers.

Audit Logging

Comprehensive recording of platform activity and administrative actions.

Secure APIs

Controlled access to platform services through documented APIs.

Operational Governance

Separation of duties supporting secure internal operations.

Section 2

Built for Operational Control

The platform has been designed to support controlled financial operations through:

User permissions
Approval workflows
Administrative controls
Customer management
Operational oversight
Activity history
Operator
Approval
Audit
Reporting
Section 3

Auditability

Comprehensive transaction histories, administrative activity records and audit logging help operators trace operational actions, support investigations and maintain evidence for internal control and compliance processes. The platform records operational activity across the system, helping organizations support:

  • Internal controls
  • Operational transparency
  • Compliance processes
  • Management reporting
  • Investigation workflows
Section 4

Authentication & Access

Two-factor authentication for customer accounts

Role-based access control for administrators

Configurable administrator roles and permission groups

Section 5

Deployment Security

Infrastructure safeguards are configured according to the requirements and hosting environment of each deployment.

Encryption in transit and at rest can be implemented at the deployment and infrastructure layers

Backup and recovery architecture can be configured to deployment requirements

Monitoring and high-availability infrastructure can be implemented according to the selected hosting environment

Section 6

Security is not only about protecting systems.

It enables organizations to:

  • Scale confidently.
  • Protect customers.
  • Support internal governance.
  • Meet operational requirements.
  • Build trust.
Section 7

Security Highlights

Customer Two-Factor Authentication
Administrator Role-Based Access
Audit Logging
Secure APIs
Configurable Encryption
Permission Groups
Operational Controls
Deployment Security

Designed for regulated financial environments

Strong operational controls, security principles, auditability, and enterprise governance—working together to support your organization as it scales.

Evaluating infrastructure responsibility? Read the on-premises vs SaaS security guide for a balanced comparison of isolation, access, logging, patching, source code and incident response.

Want long-term control over your platform?

SAMFCore is available under perpetual licensing, with Full Source Code available through Perpetual + Full Source Code and Enterprise Global. Deploy on customer-controlled infrastructure and maintain the licensed deployment with your internal team or appointed developers.

Explore SAMFCore Licensing
WhatsApp