Security, identity, and permissions

SSO, MFA, and fine-grained permissions across everything.

The platform handles some of the most sensitive personal data a government system can hold, and it is built and operated accordingly. SOC 2 compliant, and through multiple independent security audits with minimal findings.

Capabilities

Identity and access

OpenID Connect SSO against state identity providers, true single logout, and hardened account linking, including extra protections for domestic-violence survivors
MFA on every staff login by SMS, automated voice call, or email; revocable trusted devices; adaptive CAPTCHA; automatic lockout on repeated failures
13 roles composed from about 95 discrete permissions, with delegated administration so each agency manages its own staff
Annual user-access reviews with automatic lockout on lapse, dormant-account lockout, and annual cybersecurity training with signed attestations

Data protection

Encrypted at rest and in transit, FIPS and post-quantum-ready TLS policies, SSL-required database connections, and secrets in a managed vault
Privacy-preserving staff search: production search requires sanctioned identity-field combinations, and every result view is logged
Automated retention and archival with integrity verification before any deletion

A platform built for many agencies at once

Multi-tenant by design: a self-referential organization hierarchy (state, regional, local, vendors) with scoped support agreements and per-agency configuration
AWS-native: autoscaling, immutable production deploys, private subnets, and five managed environments from one infrastructure-as-code definition
About 30 feature flags for staged rollouts and kill switches, plus a zero-database maintenance mode
Credentialed vulnerability-scanning access provisioned on every server

More modules

Let’s talk about what your agency needs.

An intro conversation, a demo of Housing Forge, a conversation about your specific needs.

Talk To Us