Sub-module
Security & Compliance
Security as Architecture, Not Afterthought
Every layer of DXP enforces security policies — from field-level encryption to SOC 2 audit trails.
Identity & Access
SSO, SAML, OIDC, SCIM provisioning, and RBAC with attribute-based access control.
Field-Level Encryption
Encrypt sensitive fields at rest with customer-managed keys and key rotation.
Audit Logging
Immutable audit trail for every data access, modification, and administrative action.
Compliance Automation
Continuous compliance monitoring for SOC 2, HIPAA, GDPR, CCPA, and FedRAMP.
security-that-permeates-every-layer
Security That Permeates Every Layer
DXP Security is not a bolt-on module — it is woven into every layer of the platform. Authentication, authorization, encryption, and audit logging are enforced at the API gateway, the content layer, the rendering pipeline, and the data storage layer. There is no way to bypass security by accessing a lower layer.
Field-level encryption uses customer-managed keys (BYOK) with automatic key rotation. Sensitive fields — PII, financial data, health records — are encrypted at rest with AES-256 and in transit with TLS 1.3. Encryption is transparent to application logic; encrypted fields are decrypted at read time based on the requesting user's permissions.
The compliance engine continuously monitors platform configuration, access patterns, and data handling against regulatory frameworks. Deviations from SOC 2, HIPAA, GDPR, CCPA, or FedRAMP requirements generate alerts with remediation guidance. Compliance reports are generated on-demand for auditors.
Security & Compliance Specifications
Technical specifications for DXP security and compliance.
- AuthenticationSSO, SAML 2.0, OIDC, OAuth 2.0, API keys, mTLS
- AuthorizationRBAC + ABAC with field-level permissions
- Encryption at RestAES-256 with customer-managed keys (BYOK)
- Encryption in TransitTLS 1.3 with certificate pinning
- Audit TrailImmutable, tamper-evident with 7-year retention
- ProvisioningSCIM 2.0 for automated user lifecycle management
- ComplianceSOC 2 Type II, HIPAA, GDPR, CCPA, FedRAMP