Enterprise Security & ITIDA CAdES-BES Compliance
Built to satisfy strict ITIDA requirements and Egyptian Tax Authority digital signature standards, protecting your financial data with zero private key exposure.
1. ITIDA CAdES-BES Compliant
Enforces SHA-256 digest hashing, detached CMS signature structures (`sha256WithRSAEncryption`), ESSCertIDv2 attribute verification, and full trust chain validation reaching the Egypt Root CA.
2. Zero Private Key Exposure
With the OTax Agent Bridge, your USB hardware token private keys never leave your physical device. Hashing occurs on-device via local WebSocket PKCS#11 interface.
3. Role-Based Access Control (RBAC)
Granular permission management for team members, accountants, and external auditors. Enforces strict organization data isolation with multi-tenant encryption.
4. AES-256 & TLS 1.3 Tunneling
All database connections and API payload transmissions run over TLS 1.3 encrypted sockets with AES-256 at-rest encryption.