Technical Infrastructure and Information Security
Your maintenance data is directly tied to your production continuity — that’s why we’re transparent about what bakimo actually does around authentication, data isolation and change tracking. Every item below is verified against the live system.
Password Security
User passwords are stored as one-way bcrypt hashes — never in plain text. The system upgrades itself continuously: when a user logs in, their password is automatically migrated to the current hashing standard.
Brute-Force Protection
The login screen is rate-limited (too many failed attempts in a given window are automatically blocked for a short period). This protects against automated password-guessing attacks.
Field-Level Change Log
Across more than 100 modules, every change made to a record (which field, old value, new value, which user, which date) is separately logged. This gives you full retrospective traceability for internal audits and dispute resolution.
Multi-Tenant Data Isolation
Each company’s data is kept in its own separate database. It’s never mixed with or shared in the same table as another company’s data — isolation is enforced at the architecture level.
Role-Based Access Control
Users can only view/edit within the warehouse, workshop and operation permissions assigned to them. Permissions are managed centrally, per screen and per action type (view/add/edit/delete/approve).
Connection Security
All access to our servers is encrypted with HTTPS/TLS. Data exchanged between your browser and bakimo’s servers never travels as plain text.
Hosting and Backups
Your data is hosted on servers located in Turkey and backed up automatically every day.
API Access
An API is available for your data transfer and integration needs. Accounting/ERP integrations also run through this same infrastructure (see Integrations).
Frequently Asked Questions
Do you support SSO / LDAP / an enterprise identity provider?
Not currently. Login is done with a username/password or PIN. In the Enterprise plan, SSO/LDAP integration is planned together with our sales team as a separate integration project.
Can I export all of my data in a single bulk operation?
By deliberate design, no — module-based (stock card, maintenance definition, machine, production recipe, etc.) Excel import/export is supported, but a single “download the entire database” bulk export is not offered. If you’re leaving, our sales team will work with you on a data handover plan in addition to these module-based exports.
How often are backups taken?
Automatically, every day. In the Enterprise plan, backup frequency and the restore process are planned together with you as part of the project, based on your facility’s needs.
How long is a session, and can an admin change it?
The default session length is 8 hours, and it can be changed per user by your administrator. If the same user logs in from a new location on the same device type (web/mobile), the previous session ends automatically shortly after.