Sub-module

Security & Compliance

Enterprise identity, encryption, and compliance automation across every DXP layer.

Identity & Access

SSO, SAML, OIDC, SCIM provisioning, and RBAC with attribute-based access control.

Field-Level Encryption

Encrypt sensitive fields at rest with customer-managed keys and key rotation.

Audit Logging

Immutable audit trail for every data access, modification, and administrative action.

Compliance Automation

Continuous compliance monitoring for SOC 2, HIPAA, GDPR, CCPA, and FedRAMP.

security-that-permeates-every-layer

Security That Permeates Every Layer

DXP Security is not a bolt-on module — it is woven into every layer of the platform. Authentication, authorization, encryption, and audit logging are enforced at the API gateway, the content layer, the rendering pipeline, and the data storage layer. There is no way to bypass security by accessing a lower layer.

Field-level encryption uses customer-managed keys (BYOK) with automatic key rotation. Sensitive fields — PII, financial data, health records — are encrypted at rest with AES-256 and in transit with TLS 1.3. Encryption is transparent to application logic; encrypted fields are decrypted at read time based on the requesting user's permissions.

The compliance engine continuously monitors platform configuration, access patterns, and data handling against regulatory frameworks. Deviations from SOC 2, HIPAA, GDPR, CCPA, or FedRAMP requirements generate alerts with remediation guidance. Compliance reports are generated on-demand for auditors.