[ RECOVERY ][ EMAIL-LINK ][ TTL: 30M ][ AUDITED ]
// recovery //
Reset access withoutlosing context
We send a single-use recovery link bound to a 30-minute TTL. Every reset is recorded in the audit trail.
AES-256-GCM
Datasource credentials encrypted at rest with key rotation.
JWT + Refresh
Short-lived tokens with rotation and Redis-backed blacklist.
MFA & SSO ready
SAML, LDAP / Active Directory, and time-based MFA.
LGPD aligned
Consent, masking and audit trail wired across the stack.
© 2026 SOFI · governed virtualization
