1. Data Ownership & Privacy Safeguards
Under all white-label licensing tiers, you and your clients retain 100% legal ownership of your customer lists, appointment logs, payment records, and transactional databases. Endurance acts strictly as a data processor / technical infrastructure custodian. We will never market to, contact, or extract data from your end-client accounts.
2. Logical Tenant Isolation
Our multi-tenant SaaS architecture enforces strict logical tenant segregation at the database, query, and cache levels. Every API call, database query, and websocket channel requires an authenticated tenant context header. Cross-tenant leakage is architecturally impossible.
3. Encryption at Rest & In Transit
All data traveling across public networks is encrypted using TLS 1.3 with forward secrecy. At rest, sensitive database partitions, client records, and access tokens are secured using AES-256 encryption. Passwords and credentials use salted Argon2 / bcrypt hashing algorithms.
4. Automated Backups & Disaster Recovery
Automated snapshot backups run every 24 hours with point-in-time recovery capabilities. Backups are encrypted and replicated across geographically separated cloud data centers to guarantee a Recovery Point Objective (RPO) of <24 hours and a Recovery Time Objective (RTO) of <4 hours.
5. Direct Merchant Settlement & Tokenization
Neither Endurance nor the white-label reseller stores raw customer credit card numbers. All cardholder interactions occur via PCI-DSS Level 1 compliant tokenized iframes provided directly by Stripe or Razorpay. Client revenue settles straight into the business owner's bank account.
6. Role-Based Access Control (RBAC)
System privileges are partitioned between Agency Owner (who manages client accounts), Branch Manager (who manages location rosters and reports), Staff Member (who views their own calendar and appointments), and End-Customer (who views their personal booking records).
7. Source Code Escrow & Intellectual Property
Partners opting for the Source Code / IP License tier receive a perpetual, non-exclusive commercial license to modify, host, and deploy the codebase. We provide clean, modular, and linted React / React Native / Node.js source repositories with full developer onboarding documentation.
8. Uptime Commitments & Maintenance SLAs
Managed White-Label tiers include a 99.9% monthly uptime service level agreement. Scheduled maintenance windows occur during low-traffic off-peak hours (Sundays 02:00–04:00 UTC) with 72-hour advance notifications sent to agency partners.