CATAMA DMS protects your data with cryptographic standards, complete audit logs, and well-thought-out defense in depth – not as an add-on, but by design.
Every file and every new version is fingerprinted with a SHA-256 hash. You can prove at any time that the document hasn't been altered since upload – essential for GoBD and HGB.
Every action – upload, preview, download, delete, permission change, signature request – is logged.
For e-signatures, every action is additionally cryptographically chained (prev_hash → row_hash). Tampering with the audit trail would be immediately visible.
Define retention periods per folder and lock documents during ongoing proceedings.
Incoming files are scanned before storage – with configurable block or quarantine policy.
External shares are not guessable: tokens are stored as a hash only. Preview links carry a signed TTL.
Public endpoints (share links, signature routes) are protected by rate limits against brute-force and crawlers.
Unbooked modules are blocked server-side (HTTP 423 Locked) – misbookings or accidental activations are impossible.
Sensitive configurations (e.g., SMTP passwords, cloud OCR keys) are encrypted at rest using Laravel's Crypt::encryptString.
You retain sovereignty over your data. Optionally host the DMS in your own infrastructure.
Optionally in our German data center or with your own provider.
This marketing site and the DMS UI use no trackers, no cookie banner theatre.
Full on-premises installation with local storage, S3, or WebDAV – your choice.
Security whitepaper, auditor briefing, or architecture workshop – just reach out.
Get in touch