First obligations from September 2026
Platform & Security

Enterprise security with RBAC, multi-tenancy, and API keys

7 roles, multi-tenant architecture, SSO/MFA, and granular API keys — with data residency in the EU

The Kunnus platform is built for enterprise requirements: role-based access control with seven roles, multi-tenant architecture with organizations and workspaces, SSO/MFA, scoped API keys, and an in-app notification center. GDPR-compliant, hosted with European providers, and designed for teams of any size.

7 rolesRBAC
Multi-tenantArchitecture
API keysIntegration
EUData residency
app.kunnus.tech/settings/security

Platform Security

Smart Systems GmbH · 3 workspaces
GDPR · EURBAC
Roles7 · RBAC
Owner
Full access
Admin
Manage
Approver
Approve
Developer
Write
Auditor
Read-only
Viewer
Read-only
Guest
Scoped
SSO · MFA
SAML, OIDC, TOTP
API Keys
kn_••••••6f2a
Workspaces
3 · isolated

Key Benefits

RBAC (7 Roles)

Owner, Admin, Approver, Developer, Auditor, Viewer, Guest. Granular permissions for each role — from full access to read-only audit access.

Multi-Tenancy (Org + Workspaces)

Organizations as top-level boundary. Workspaces for team and project separation. GDPR-compliant with full data isolation.

API Keys

Scoped to workspace with expiry. One-time key reveal. Owner and Admin only. For CI/CD integration and automation.

Notifications

In-app notification center with real-time updates. Per-event preferences in user settings for individual configuration.

Capabilities

Role-Based Access Control (RBAC)

Seven predefined roles: Owner, Admin, Approver, Developer, Auditor, Viewer, Guest. Each role with granular permissions for all platform features.

Multi-Tenant Architecture

Organizations as top-level boundary with full data isolation. Workspaces within an organization for team and project separation.

SSO & MFA

Single sign-on and multi-factor authentication for secure access to the platform.

Scoped API Keys

API keys are scoped to a workspace and have a configurable expiry. The key is revealed only once. Management restricted to Owner and Admin.

EU Hosting & Data Residency

Kunnus is hosted exclusively with European providers — your data stays under EU legal protection, with no US hyperscaler.

Use Cases

01

Enterprise Rollout

A large organization sets up separate workspaces for product lines, assigns roles, and ensures auditors have read-only access — all within a single organization.

02

CI/CD Integration

The DevOps team creates workspace-scoped API keys for the CI/CD pipeline. SBOMs are automatically uploaded and vulnerability scans triggered.

03

Compliance Audit with Restricted Access

External auditors receive the Auditor role with read access to compliance data and audit trail — without access to confidential product data.

Enterprise security for your EU CRA compliance

See how Kunnus provides RBAC, multi-tenancy, and API keys for secure collaboration. We'll walk you through the platform in a personalized demo.