Overview

This document describes the positioning of CRM.COM in order to guarantee the System's security and performance. CRM.COM is designed to deliver high performance, scalability and maximum security.

Security

CRM.COM is designed, developed and tested with security awareness.

It is continuously tested against OWASP recommendations with manual and automated testing using Acunetix Web Scanner.

CRM.COM User Interface and Web API are implemented using security measures and tokens to prevent the most common security vulnerabilities such as XSS, CSRF, etc. It can be configured to operate over encrypted connections (HTTPS) and the Web API authentication tokens follow the JWT standard for additional security checks.

In addition, all sensitive data such as user passwords and credentials are stored in the database in an encrypted form using secure algorithms which are continuously reviewed.

Furthermore, CRM.COM is designed so it can be configured to allow or deny access to specific operations and data depending on the user's profile.

Lastly, CRM.COM provides an audit trail mechanism that can be configured to keep audit log of various record types.

Performance

CRM.COM core processes are multi-threaded and perform with at a high processing rate on minimum hardware that increases as the allocated hardware resources are increased.

The web content delivered to web browsers is compressed and cached to achieve small response times per request and the server side processing is optimized to respond to each request within a maximum of a 1 second period. With the use of a load balancer, high rate of requests can be distributed to multiple instances of CRM.COM to achieve small response times and linear scalability.

During testing, advanced profiling tools are used to make sure that CRM.COM is fully scalable and there are no blockers that affect the performance as the data grows.

Moreover, CRM.COM Web API is implemented in such a way that integrators can specify the information expected in responses to minimize the response data size and thus, maximize the performance.