Security at CORE Enterprise Solutions
CORE Enterprise Solutions is built with tenant isolation, role-based access, and auditable controls so IT operations teams can manage operational work and patch deployments with confidence.
Data Protection
Tenant isolation
Every record is scoped to a tenant through row-level security, so one tenant's data is kept private from another across the entire data model.
Data residency — United States
App data and users are stored in the United States region. Vendors receiving personal information are bound by data-processing agreements and approved transfer mechanisms (SCCs, adequacy, DPF).
Authentication and Access Control
TOTP two-factor authentication
Privileged roles can be required to verify with a time-based one-time passcode, verified server-side before access is granted.
Role-based access
A hierarchical role model — from core admin down to end user — limits who can create, read, update, or delete each type of record.
Application Security
Audit logging
Platform actions are captured in an immutable audit log with operator and timestamp, supporting incident review and accountability.
Recognizing legitimate emails
Legitimate messages come from base44-apps.com or base44.com. Always check that links point to these domains before clicking.
Infrastructure Security
Country & region availability
As a U.S.-based company, we comply with OFAC sanctions. The Service is not available in: Iran, North Korea, Syria, Cuba, Crimea, Donetsk People's Republic, Luhansk People's Republic. There are also substantial limitations on activity from the Russian Federation.
Backups and Availability
Backup retention
Backup jobs can be scheduled as full, incremental, differential, or snapshot with configurable retention and encryption, so operational data is recoverable.
Privacy
Your data choices & controls
- Access your data: request a copy of the personal data we hold by emailing compliance@base44.com.
- Delete your data: tenant data can be removed from your app dashboard (Settings → Danger Zone), or request account deletion through support.
- GDPR rights: access, rectify, erase, restrict, object, portability, and withdraw consent — contact compliance@base44.com.
- Legacy contacts: appoint a contact to receive your account in the event of your passing, via support.