Security & Compliance

Security controls for the work your teams cannot afford to lose.

AWRA OpsHub protects organization data, permissions, MFA, sessions, devices, encryption boundaries, and audit history across inventory, procurement, sales, accounting, mobile, and vendor workflows.

Security governance team reviewing access controls
Organization Isolation Scoped

Operational records stay bound to the correct organization context.

Access Control Permissioned

Roles and module permissions govern user actions.

Sessions Managed

Device trust, force logout, and inactivity controls support secure access.

Audit Trail Reviewable

Sensitive operations keep accountability context.

Active control areas

MFA Role Permissions Plan Governance Audit Logs Mobile Trust

Security control layers

Protection built into daily operations, not bolted on later.

AWRA security is designed around the work people actually do: moving stock, approving purchases, issuing invoices, managing vendors, syncing mobile devices, and reviewing finance records.

Identity controls protecting business workflows

Org Isolation

Organization-scoped records and access boundaries help prevent cross-organization data exposure.

Identity Controls

MFA, verified accounts, strong passwords, trusted devices, and session controls protect entry points.

Permission Model

Role permissions and plan controls define which screens, actions, and modules users can access.

Audit History

Critical operational changes preserve who, when, what, and why for review and accountability.

Trust operations

Security reviews need evidence, not slogans.

When your team or customer asks how access, mobile sync, permissions, and sensitive actions are controlled, AWRA should make the answer clear and reviewable.

Audit reviewers checking security evidence
01

Authenticate The User

Verified identity, MFA policies, password requirements, and session checks protect access.

02

Authorize The Action

Roles, permissions, plans, and organization policies decide what the user can actually do.

03

Record The Event

Sensitive actions, approvals, impersonation, device activity, and operational changes keep review context.

04

Monitor Exceptions

Security and admin views surface devices, sessions, impersonation, scheduler, push, and plan access context.

05

Respond And Recover

Admins can revoke trust, terminate sessions, review activity, and coordinate support when needed.

Mobile and device trust

Offline work still needs controlled access.

AWRA mobile offline workflows depend on trusted-device rules, one-day offline unlock windows, sync queues, GPS proof where required, and server-side validation when actions reconnect.

Trusted Session

Offline unlock is limited to devices that previously signed in and were trusted.

Sync Authority

Queued mobile actions still pass server policy and permission checks when synced.

GPS Evidence

Asset movements can preserve coordinates, accuracy, source, and timestamp.

Admin Response

Device trust and sessions can be reviewed and revoked when needed.

Security review areas

The controls customers usually ask about.

Security reviews should cover how users enter, what they can access, how actions are traced, and what happens when something needs investigation.

Data Protection

TLS in transit, protected storage practices, backups, and controlled access to operational data.

Access Governance

Roles, permission groups, plan access, organization overrides, and admin review screens.

Auditability

Activity, approvals, impersonation, sensitive changes, and operational records should remain reviewable.

Operational Resilience

Backups, scheduler health, sync visibility, and support workflows help keep operations accountable.

Help Center

Need a quick answer while you read?

Run inventory, procurement, assets, sales, and field work with approved AWRA guidance for setup, migration, integrations, security, pricing, and support.

Search all approved AWRA public help articles.

Open Help Center