Security

All traffic between the applications and our servers goes over TLS. Data at rest, including diagnosis photos, is encrypted on the storage volumes.

Passwords are never stored in the clear: they are hashed with an algorithm designed for secret storage, with a tunable computational cost.

Each Croplix shop reaches only its own data. Partitioning is enforced server-side on every request, never in the interface alone.

On FITO, a photo is accessible only to its author and to the agronomist assigned to the corresponding ticket.

Access to production data is limited to the people who need it for their work, protected by two-factor authentication, and logged.

Our agronomists see the cases assigned to them, not the whole database.

Croplix data is backed up daily, with a rolling thirty-day retention. Restores are tested periodically — a backup never restored is not a backup.

If you believe you have found a flaw, write to contact@nabatic.com with what is needed to reproduce it. We acknowledge within two working days and keep you informed of the fix.

We undertake not to pursue anyone who reports a flaw in good faith, without exfiltrating data or degrading the service.