Security Architecture & Cryptographic Integrity
How Maketra ensures zero customer data leakage, constant-time webhook signature verification, and complete isolation on high-throughput ERP instances.
Zero Cloud Relay
No external proxy or iPaaS middleware intercepts payloads. Direct peer-to-peer connection between merchant API and ERP.
Constant-Time Compare
Signatures are validated using byte-by-byte constant-time comparison (compare_digest) to eliminate timing attacks.
Sovereign Vault Storage
API secrets, OAuth tokens, and carrier credentials reside exclusively inside your Odoo database, encrypted at rest.
How Inbound Packets Are Authenticated
Every incoming webhook event must pass cryptographic validation before touching database models or business logic.
Payload Arrival
Raw HTTP body is captured as immutable byte stream alongside the signature header.
HMAC Computation
Odoo calculates HMAC-SHA256 of the raw body using the merchant's stored secret key in RAM.
Zero-Leak Compare
Signatures must match identically. Spoofed or altered requests are immediately rejected with HTTP 403.
Have specific infosec or compliance questions?
Our engineering team provides security architecture whitepapers and vendor risk assessments.