objectstack/packages/spec/json-schema/system/TenantSecurityPolicy.json at 8ae3d928f9c95dd320e89d8629a52085fc3d2d73 · objectstack-ai/objectstack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
{
  "$ref": "#/definitions/TenantSecurityPolicy",
  "definitions": {
    "TenantSecurityPolicy": {
      "type": "object",
      "properties": {
        "encryption": {
          "type": "object",
          "properties": {
            "atRest": {
              "type": "boolean",
              "default": true,
              "description": "Require encryption at rest"
            },
            "inTransit": {
              "type": "boolean",
              "default": true,
              "description": "Require encryption in transit"
            },
            "fieldLevel": {
              "type": "boolean",
              "default": false,
              "description": "Require field-level encryption"
            }
          },
          "additionalProperties": false,
          "description": "Encryption requirements"
        },
        "accessControl": {
          "type": "object",
          "properties": {
            "requireMFA": {
              "type": "boolean",
              "default": false,
              "description": "Require MFA"
            },
            "requireSSO": {
              "type": "boolean",
              "default": false,
              "description": "Require SSO"
            },
            "ipWhitelist": {
              "type": "array",
              "items": {
                "type": "string"
              },
              "description": "Allowed IP addresses"
            },
            "sessionTimeout": {
              "type": "integer",
              "exclusiveMinimum": 0,
              "default": 3600,
              "description": "Session timeout"
            }
          },
          "additionalProperties": false,
          "description": "Access control requirements"
        },
        "compliance": {
          "type": "object",
          "properties": {
            "standards": {
              "type": "array",
              "items": {
                "type": "string",
                "enum": [
                  "sox",
                  "hipaa",
                  "gdpr",
                  "pci_dss",
                  "iso_27001",
                  "fedramp"
                ]
              },
              "description": "Compliance standards"
            },
            "requireAuditLog": {
              "type": "boolean",
              "default": true,
              "description": "Require audit logging"
            },
            "auditRetentionDays": {
              "type": "integer",
              "exclusiveMinimum": 0,
              "default": 365,
              "description": "Audit retention days"
            },
            "dataResidency": {
              "type": "object",
              "properties": {
                "region": {
                  "type": "string",
                  "description": "Required region (e.g., US, EU, APAC)"
                },
                "excludeRegions": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "description": "Prohibited regions"
                }
              },
              "additionalProperties": false,
              "description": "Data residency requirements"
            }
          },
          "additionalProperties": false,
          "description": "Compliance requirements"
        }
      },
      "additionalProperties": false
    }
  },
  "$schema": "http://json-schema.org/draft-07/schema#"
}