Sans la plateforme
Information about Security & LGPD lives in separate spreadsheets, and nobody knows which version is current.
Avec Partiu Formatura
7 modules share the same class, graduate and event records.
Platform and intelligence · Security & LGPD
State-of-the-art security and legal compliance
Your data is protected with encryption, two-step authentication, LGPD compliance, automatic backups and high-availability cloud infrastructure.
Le problème et la solution
What changes when Security & LGPD works inside the platform
This is connected information about classes, graduates and events across 7 modules, replacing scattered spreadsheets and messages.
Sans la plateforme
Demander un chiffre prend du temps, parce qu’il faut croiser des données venues de plusieurs endroits.
Avec Partiu Formatura
Data Protection and LGPD and Compliance update together, with figures ready for the next meeting.
Sans la plateforme
Le processus dépend de qui est là ce jour-là, et son historique disparaît.
Avec Partiu Formatura
Tout le monde suit le même circuit, avec des actions consignées et des droits par rôle.
Sans la plateforme
Communiquer avec les autres services suppose d’exporter des tableurs et de resaisir les données.
Avec Partiu Formatura
Security & LGPD shares information directly with other areas of the platform.
Comment ça marche
How information moves through Security & LGPD
Chaque étape correspond à un module réel de ce domaine. Ce qu’elle produit passe à l’étape suivante sans que personne resaisisse la même information.
What is available in Security & LGPD
- Data ProtectionEncryption, backups and secure infrastructure.7
- LGPD and ComplianceFully compliant with the General Data Protection Law.6
- Privacy and Ombudsman PortalPublic channels for the holder to exercise their rights and for anyone to express themselves.7
- MonitoringContinuous monitoring of system health and performance.13
- Rules and SecurityPassword policy, lockout, mandatory two-step verification and team access review, decided by the company.13
- API CenterAll external access to the company's data on one screen: integrations, customer service, AI apps and webhooks.11
- Active ServicesThe map of everything the company has turned on: modules, services, integrations and credentials, with what needs attention.8
À la une
Public privacy and ombudsman channels
In addition to internal compliance, your company publishes two open channels: the privacy portal, where the owner requests access, correction or deletion of data and manages cookies, and the ombudsman, which receives reports, complaints, suggestions and compliments with a monitoring protocol and an option for anonymous comments.
Voir à l’œuvre- Registered and traceable holder request
- Protocol to follow the demonstration afterwards
- Anonymous demonstration when policy allows
- Controller and person in charge data published
Data Protection
Encryption, backups and secure infrastructure.
- Data encryption in transit and at rest
- Authentication with high security features
- Two-Step Authentication (TOTP)
- Connected device management
- Automatic daily database backups
- Automatic backup of uploads and files
- AWS infrastructure (São Paulo) with high availability with scale in other data centers throughout Brazil
LGPD and Compliance
Fully compliant with the General Data Protection Law.
- Explicit and traceable consent
- Right to be forgotten (data deletion)
- Export of graduate's personal data
- Integrated privacy policy and terms of use
- Consent tracking by functionality
- Electronic signature of contracts and terms
Privacy and Ombudsman Portal
Public channels for the holder to exercise their rights and for anyone to express themselves.
- Privacy portal with company topics, policies and documents gathered
- Owner request through the portal itself: access, correction and deletion of data
- Visitor-managed cookie preferences
- Public ombudsman with complaints, complaints, suggestions and praise
- Follow-up protocol to consult the manifestation later
- Anonymous manifestation when company policy allows
- Controller and supervisor data published on each channel
Monitoring
Continuous monitoring of system health and performance.
- Automatic health checks for all services
- Monitoring and performance
- Centralized management via PM2
- Complete activity and audit logs
- Sistema > Auditoria: um catálogo único com mais de quarenta trilhas de auditoria da plataforma, cada uma com os últimos registros e atalho para a tela completa
- Auditoria das chamadas de API por token de integração, com filtros, detalhe de cada chamada e exportação
- Tokens de integração com escopos, ativação, regeneração da chave e do segredo do webhook e revogação
- Entregas de webhook do Workflow com histórico, teste e reenvio
- Painel de status dos serviços do ecossistema, no ar ou fora do ar
- Public status page at status.usepartiu.com: overall status, ongoing incidents with updates and services by group
- Availability of each service in 24-hour bars, in 15-minute windows, or 90-day bars, with uptime percentage and 14 days of incident history
- The page refreshes itself every 15 minutes and never shows internal addresses or technical errors
- 99.9% uptime guaranteed (Enterprise SLA)
Rules and Security
Password policy, lockout, mandatory two-step verification and team access review, decided by the company.
- Minimum and maximum password length, with uppercase, lowercase, number and symbol required as you choose
- Passwords containing the person's name, username or e-mail rejected, as well as common passwords and repeated characters
- Block reuse of the last passwords (up to 24), minimum interval between changes and expiry with a warning beforehand
- Mandatory change on first access or after an administrator sets someone's password
- Lockout after 3 to 50 wrong attempts, for the time the company sets
- Accounts idle for a long time deactivated automatically, within the chosen period
- Two-step verification required for no one, administrators only or the whole team
- Tester that checks a sample password against the rules instantly
- Account status with 8 filters: active, administrators, without two-step, expired password, no access for 90 days, locked, pending change and deactivated
- Require password change in bulk, ending open sessions, and account unlocking
- Periodic access review: person by person, kept, deactivated or forced password, with notes and CSV export
- Every change recorded in the history; if the record fails, nothing changes
- Rules in effect within 60 seconds of being saved
API Center
All external access to the company's data on one screen: integrations, customer service, AI apps and webhooks.
- The four kinds of access together: system integrations (ERP, BI, accounting, website), customer service platforms, AI apps such as Claude and ChatGPT, and outgoing webhooks
- Last 24 hours, 7 days or 30 days, compared with the previous period
- 5 indicators: requests, success rate, average response time, errors and active credentials, including unused ones
- Traffic chart by requests, response time or errors, split by API
- 30-day availability per API in 4 states: operational, degraded, unstable and down
- Automatic check every 5 minutes, adjustable from 1 to 60, and a button to test all at once
- Searchable catalog showing, for each API, usage, errors, last access and how much of the call limit has been used
- Recent activity across all APIs: when, which credential, which call, result and duration
- Credentials created, edited, enabled, disabled and revoked right there, with a new secret shown only once
- AI app with write permission turned on or off, or access revoked instantly
- Shortcut to each API's documentation
Active Services
The map of everything the company has turned on: modules, services, integrations and credentials, with what needs attention.
- Layered map: company, modules, platform services and integrations and credentials
- Diagram or list view, with search and an option to show what is turned off
- Clicking any item shows what it uses, what depends on it and where it's configured
- 5 indicators: active modules, platform services, external integrations, credentials and what needs attention
- 41 platform services in 5 groups: core, APIs, web portals, apps and media, video and AI
- Integrations for payments, banks, WhatsApp and e-mail, invoices, files and photos, AI, school systems and CRMs
- Automatic warnings: expired bank certificate, bank access not authorized, WhatsApp without a number, e-mail domain without SPF or DKIM, invoice still in test mode, failed storage test and suspended webhook
- Read-only, never showing the value of a password or key
Liste de contrôle
Everything included in Security & LGPD
All 65 features in this area, grouped by module so you can compare systems item by item.
- Data encryption in transit and at rest
- Authentication with high security features
- Two-Step Authentication (TOTP)
- Connected device management
- Automatic daily database backups
- Automatic backup of uploads and files
- AWS infrastructure (São Paulo) with high availability with scale in other data centers throughout Brazil
- Explicit and traceable consent
- Right to be forgotten (data deletion)
- Export of graduate's personal data
- Integrated privacy policy and terms of use
- Consent tracking by functionality
- Electronic signature of contracts and terms
- Privacy portal with company topics, policies and documents gathered
- Owner request through the portal itself: access, correction and deletion of data
- Visitor-managed cookie preferences
- Public ombudsman with complaints, complaints, suggestions and praise
- Follow-up protocol to consult the manifestation later
- Anonymous manifestation when company policy allows
- Controller and supervisor data published on each channel
- Automatic health checks for all services
- Monitoring and performance
- Centralized management via PM2
- Complete activity and audit logs
- Sistema > Auditoria: um catálogo único com mais de quarenta trilhas de auditoria da plataforma, cada uma com os últimos registros e atalho para a tela completa
- Auditoria das chamadas de API por token de integração, com filtros, detalhe de cada chamada e exportação
- Tokens de integração com escopos, ativação, regeneração da chave e do segredo do webhook e revogação
- Entregas de webhook do Workflow com histórico, teste e reenvio
- Painel de status dos serviços do ecossistema, no ar ou fora do ar
- Public status page at status.usepartiu.com: overall status, ongoing incidents with updates and services by group
- Availability of each service in 24-hour bars, in 15-minute windows, or 90-day bars, with uptime percentage and 14 days of incident history
- The page refreshes itself every 15 minutes and never shows internal addresses or technical errors
- 99.9% uptime guaranteed (Enterprise SLA)
- Minimum and maximum password length, with uppercase, lowercase, number and symbol required as you choose
- Passwords containing the person's name, username or e-mail rejected, as well as common passwords and repeated characters
- Block reuse of the last passwords (up to 24), minimum interval between changes and expiry with a warning beforehand
- Mandatory change on first access or after an administrator sets someone's password
- Lockout after 3 to 50 wrong attempts, for the time the company sets
- Accounts idle for a long time deactivated automatically, within the chosen period
- Two-step verification required for no one, administrators only or the whole team
- Tester that checks a sample password against the rules instantly
- Account status with 8 filters: active, administrators, without two-step, expired password, no access for 90 days, locked, pending change and deactivated
- Require password change in bulk, ending open sessions, and account unlocking
- Periodic access review: person by person, kept, deactivated or forced password, with notes and CSV export
- Every change recorded in the history; if the record fails, nothing changes
- Rules in effect within 60 seconds of being saved
- The four kinds of access together: system integrations (ERP, BI, accounting, website), customer service platforms, AI apps such as Claude and ChatGPT, and outgoing webhooks
- Last 24 hours, 7 days or 30 days, compared with the previous period
- 5 indicators: requests, success rate, average response time, errors and active credentials, including unused ones
- Traffic chart by requests, response time or errors, split by API
- 30-day availability per API in 4 states: operational, degraded, unstable and down
- Automatic check every 5 minutes, adjustable from 1 to 60, and a button to test all at once
- Searchable catalog showing, for each API, usage, errors, last access and how much of the call limit has been used
- Recent activity across all APIs: when, which credential, which call, result and duration
- Credentials created, edited, enabled, disabled and revoked right there, with a new secret shown only once
- AI app with write permission turned on or off, or access revoked instantly
- Shortcut to each API's documentation
- Layered map: company, modules, platform services and integrations and credentials
- Diagram or list view, with search and an option to show what is turned off
- Clicking any item shows what it uses, what depends on it and where it's configured
- 5 indicators: active modules, platform services, external integrations, credentials and what needs attention
- 41 platform services in 5 groups: core, APIs, web portals, apps and media, video and AI
- Integrations for payments, banks, WhatsApp and e-mail, invoices, files and photos, AI, school systems and CRMs
- Automatic warnings: expired bank certificate, bank access not authorized, WhatsApp without a number, e-mail domain without SPF or DKIM, invoice still in test mode, failed storage test and suspended webhook
- Read-only, never showing the value of a password or key
Want to see Security & LGPD in your operation?
Demandez une démonstration sur vos propres chiffres, sans engagement. Un échange vous aidera à juger si le module répond à vos besoins.