[{"data":1,"prerenderedAt":350},["ShallowReactive",2],{"navigation_docs_fr":3,"-fr-architecture-securite":52,"-fr-architecture-securite-surround":345},[4,14,32,42],{"title":5,"path":6,"stem":7,"children":8},"L'essentiel","/fr/proposition","fr/1.proposition/1.index",[9,10],{"title":5,"path":6,"stem":7},{"title":11,"path":12,"stem":13},"Votre besoin, compris","/fr/proposition/comprehension","fr/1.proposition/2.comprehension",{"title":15,"path":16,"stem":17,"children":18},"Vue d'ensemble","/fr/architecture","fr/2.architecture/1.index",[19,20,24,28],{"title":15,"path":16,"stem":17},{"title":21,"path":22,"stem":23},"Les choix techniques","/fr/architecture/stack","fr/2.architecture/2.stack",{"title":25,"path":26,"stem":27},"Sécurité & conformité","/fr/architecture/securite","fr/2.architecture/3.securite",{"title":29,"path":30,"stem":31},"Les 19 modules","/fr/architecture/modules","fr/2.architecture/4.modules",{"title":33,"path":34,"stem":35,"children":36},"Le planning 8 mois","/fr/roadmap","fr/3.roadmap/1.index",[37,38],{"title":33,"path":34,"stem":35},{"title":39,"path":40,"stem":41},"La méthode","/fr/roadmap/methodologie","fr/3.roadmap/2.methodologie",{"title":43,"path":44,"stem":45,"children":46},"Vortex-Soft","/fr/equipe","fr/4.equipe/1.index",[47,48],{"title":43,"path":44,"stem":45},{"title":49,"path":50,"stem":51},"Références — eCampus","/fr/equipe/references","fr/4.equipe/2.references",{"id":53,"title":25,"badge":54,"body":55,"category":54,"description":338,"extension":339,"links":54,"meta":340,"navigation":342,"path":26,"seo":343,"stem":27,"tags":54,"__hash__":344},"docs_fr/fr/2.architecture/3.securite.md",null,{"type":56,"value":57,"toc":329},"minimark",[58,62,67,70,183,187,193,221,225,228,250,265,269,297,301],[59,60,61],"p",{},"La sécurité est posée dans l'architecture, pas ajoutée à la fin : entrée unique par la passerelle Traefik, cloisonnement des services, Rust pour les modules critiques.",[63,64,66],"h2",{"id":65},"défense-en-profondeur","Défense en profondeur",[59,68,69],{},"Chaque niveau est indépendant des autres.",[71,72,73,89],"table",{},[74,75,76],"thead",{},[77,78,79,83,86],"tr",{},[80,81,82],"th",{},"Niveau",[80,84,85],{},"Mesure",[80,87,88],{},"Ce qu'elle arrête",[90,91,92,112,126,140,155,169],"tbody",{},[77,93,94,98,109],{},[95,96,97],"td",{},"Périmètre",[95,99,100,104,105,108],{},[101,102,103],"strong",{},"Traefik"," : entrée unique, terminaison ",[101,106,107],{},"TLS 1.3",", en-têtes durcis",[95,110,111],{},"Interception, surface d'attaque dispersée",[77,113,114,117,123],{},[95,115,116],{},"Accès",[95,118,119,122],{},[101,120,121],{},"Double authentification (2FA)"," sur les rôles étendus",[95,124,125],{},"Vol de mot de passe",[77,127,128,131,137],{},[95,129,130],{},"Autorisation",[95,132,133,136],{},[101,134,135],{},"7 rôles cloisonnés",", droits paramétrables par votre administrateur",[95,138,139],{},"Élévation de privilèges, fuite entre projets",[77,141,142,145,152],{},[95,143,144],{},"Application",[95,146,147,148,151],{},"Services ",[101,149,150],{},"Rust"," pour Finance & coffre-fort",[95,153,154],{},"Corruption mémoire, injection",[77,156,157,160,166],{},[95,158,159],{},"Chaîne logicielle",[95,161,162,165],{},[101,163,164],{},"Scan des dépendances"," à chaque build (DevSecOps, GitHub Actions)",[95,167,168],{},"Failles connues, dépendances vulnérables",[77,170,171,174,180],{},[95,172,173],{},"Traçabilité",[95,175,176,179],{},[101,177,178],{},"Journal d'audit inaltérable"," via le bus NATS/JetStream",[95,181,182],{},"Contestation, effacement de traces",[63,184,186],{"id":185},"le-coffre-fort-numérique","Le coffre-fort numérique",[59,188,189,190,192],{},"Pour les titres fonciers, contrats et plans. Moteur de chiffrement écrit en ",[101,191,150],{}," :",[194,195,196,203,209,215],"ul",{},[197,198,199,202],"li",{},[101,200,201],{},"Chiffrement AES-256 par fichier"," — une clé distincte par document",[197,204,205,208],{},[101,206,207],{},"Horodatage certifié"," de chaque dépôt",[197,210,211,214],{},[101,212,213],{},"Suppression à double confirmation",", journalisée",[197,216,217,220],{},[101,218,219],{},"Accès PIN / biométrie"," sur mobile, indépendant de la session applicative",[63,222,224],{"id":223},"signature-électronique-à-valeur-légale","Signature électronique à valeur légale",[59,226,227],{},"Deux niveaux, selon l'enjeu :",[194,229,230,240],{},[197,231,232,235,236,239],{},[101,233,234],{},"Avancée"," (intégrée) pour le volume — devis, PV de chantier : empreinte du document, identité (2FA), horodatage et journal d'audit inaltérable, au format ",[101,237,238],{},"PAdES"," (vérifiable dans le temps)",[197,241,242,245,246,249],{},[101,243,244],{},"Qualifiée"," via un prestataire de confiance ",[101,247,248],{},"agréé sénégalais"," (SenTrust / Afric Trust) pour les actes critiques — contrats, titres fonciers, PV de réception",[59,251,252,253,256,257,260,261,264],{},"Conforme à la ",[101,254,255],{},"loi n° 2008-08"," et au ",[101,258,259],{},"décret n° 2008-720"," sur la certification électronique — valeur probante reconnue au Sénégal ; option ",[101,262,263],{},"eIDAS"," pour la diaspora européenne.",[63,266,268],{"id":267},"continuité","Continuité",[194,270,271,281,291,294],{},[197,272,273,276,277,280],{},[101,274,275],{},"Sauvegardes quotidiennes chiffrées",", rétention 90 jours, ",[101,278,279],{},"réplication géographique"," du stockage objet (MinIO)",[197,282,283,286,287,290],{},[101,284,285],{},"Kubernetes"," relance un service qui tombe ; le déploiement ",[101,288,289],{},"Blue-Green"," met à jour sans interruption",[197,292,293],{},"Point de reprise (RPO) et délai de reprise (RTO) définis avec vous et contractualisés",[197,295,296],{},"Exercice de restauration joué avant la mise en production, rapport à l'appui",[63,298,300],{"id":299},"ce-que-nous-prouvons-avant-le-lancement","Ce que nous prouvons avant le lancement",[194,302,303,309,315,326],{},[197,304,305,308],{},[101,306,307],{},"Tests d'intrusion"," (OWASP) — rapport remis, corrections vérifiées",[197,310,311,314],{},[101,312,313],{},"Tests de charge"," à 2 000+ utilisateurs simultanés — rapport remis, point de rupture documenté",[197,316,317,318,321,322,325],{},"Conformité ",[101,319,320],{},"RGPD"," et ",[101,323,324],{},"loi sénégalaise n° 2008-12"," sur la protection des données personnelles",[197,327,328],{},"Politique de confidentialité et CGU intégrées à l'inscription",{"title":330,"searchDepth":331,"depth":331,"links":332},"",2,[333,334,335,336,337],{"id":65,"depth":331,"text":66},{"id":185,"depth":331,"text":186},{"id":223,"depth":331,"text":224},{"id":267,"depth":331,"text":268},{"id":299,"depth":331,"text":300},"Paiements, coffre-fort, données personnelles — le niveau bancaire exigé.","md",{"icon":341},"lucide:shield-check",true,{"title":25,"description":338},"U_Ph7tdT_gonapoew6GIEIsX4c3fzAdtrtVWCasl0kg",[346,348],{"title":21,"path":22,"stem":23,"description":347,"children":-1},"Chaque technologie justifiée par une exigence du cahier des charges.",{"title":29,"path":30,"stem":31,"description":349,"children":-1},"La couverture complète du cahier des charges, famille par famille.",1784726248077]