NNUFUCMS
Trust

Security is a platform feature, not an add-on

NUFUCMS is engineered so that content teams can move quickly while security, privacy and compliance requirements are met by default.

Identity & access

  • SSO via SAML 2.0 and OIDC
  • SCIM user provisioning
  • Enforced two-factor authentication
  • Scoped, rotatable API keys

Data protection

  • TLS 1.3 in transit
  • AES-256 at rest
  • Tenant isolation
  • Configurable data residency

Monitoring & audit

  • Immutable audit log
  • 24/7 platform monitoring
  • Anomaly and abuse detection
  • Exportable security events

Resilience

  • Daily automated backups
  • Point-in-time restore
  • Multi-region delivery
  • Documented incident response

Governance

  • GDPR-ready processing
  • Data processing agreement
  • Sub-processor register
  • Least-privilege internal access

Secure development

  • Peer-reviewed changes
  • Automated dependency scanning
  • Periodic penetration testing
  • Staged rollouts with rollback
Disclosure

Report a vulnerability

We operate a responsible disclosure programme. Send findings to security@nufucms.com with reproduction steps. Please do not access other customers' data or degrade the service while testing.

Contact the security teamRead the SLA