Security & Compliance

Enterprise-Grade Security for Your District‘s Data

Multi-factor authentication, granular permissions, complete audit trails, and strict data isolation – because your water rights data, customer information, and operational records deserve serious protection.

Watervize is built with security at every layer. The multi-tenant architecture ensures each district‘s data is completely isolated – your data is never mixed with another district‘s, period. The role-based access control system gives you granular control over who can see and do what, down to individual actions like “can this user create water orders?“ or “can this user approve maintenance work orders?“



Security Features

Multi-factor authentication: TOTP authenticator apps, FIDO2 security keys, and recovery codes
Role-based access control (RBAC)
Provider-level and water user-level role assignments
Complete data change audit trail – every model change tracked with user, timestamp, and context
Session management with tracking, journey analysis, and forced logout capability
Brute-force protection with automated account lockout
Strict multi-tenant data isolation
Content Security Policy headers, CSRF, and XSS protection
Encrypted data in transit and at rest