Security

Security is not an added feature: it forms the very foundation of the PP2P architecture.

Architecture at a glance

👥 USERS L4Staff · endpoint workstations L3Intermediate relays L2Coordination · administration L1ROOT · Internal certificate authority Vertical trains (UP / DOWN) Horizontal trains — peer-to-peer exchanges at the same level 🔒 No data hosted at PP2P TECHNOLOGIES — everything stays with the customer

Hierarchical peer-to-peer architecture: data "trains" travel vertically (UP/DOWN) and horizontally between nodes, with no central server.

Zero Trust architecture

Every node on the network holds its own cryptographic identity; no trust is granted by default.

  • Private Root CA: each organisation generates its own internal certificate authority — with no dependency on any third party.
  • Internal X.509 certificates carrying the role (ROOT / ADMIN / USER) in a dedicated extension.
  • Mutual TLS and systematic RSA-SHA256 signatures on all exchanges.
  • Revocation: a compromised certificate is revoked and propagated across the network (persistent killswitch).
  • Offboarding: when a member of staff leaves, their certificate is revoked and their workstation is immediately excluded.

Access security

  • Local locking of workstation access.
  • Compatibility with Windows authentication mechanisms.
  • Management of authorised devices within the organisation.

Data security

  • 100% local data: it resides on the organisation's infrastructure.
  • No PP2P server intercepts or stores business data.
  • Backups controlled by the customer, according to their own policy.
  • End-to-end encryption of communications between nodes.

Security lifecycle

  • Responsible disclosure: see our vulnerability disclosure policy and the security.txt file.
  • Regular security updates included with any active licence.
  • Independent audit planned: an external security audit and a penetration test are scheduled as part of the industrialisation programme.

Compliance

The decentralised architecture of PP2P ORVANE makes compliance easier for your organisation. See the Compliance page for the details (GDPR, NIS2, local hosting, logging, access control).