Security and reliability

Security and reliability

Built for agency portfolios where stability matters, with clear boundaries, controlled change and predictable publishing.

This page outlines the platform controls and shared responsibilities used across RealMosaic. Specific operational details are covered during onboarding.
01

Platform boundaries

  • Clear separation between authoring and public site delivery
  • Public delivery is read focused, while publishing happens in the admin system
  • Predictable output to support caching and reduce surprises
  • Site isolation as a first principle for multi site operation
02

Access control

  • Account authentication and role based access controls
  • Granular permissions for admin modules and actions
  • Clear separation between agency users and client editors
  • Permissions and guardrails to reduce accidental changes
03

Change control

  • Release discipline focused on stability
  • Theme workflow with history, comparison and restore for safer changes
  • Publishing guardrails to protect layouts and brand
  • Clear communication during early access and rollout
04

Reliability

  • Cache friendly delivery patterns designed for stable performance
  • Clear boundaries between admin and public delivery
  • Operational practices designed to reduce surprises
  • Escalation paths for platform level issues
05

What agencies can expect

  • Guided onboarding and recommended role settings
  • Support channels and escalation paths
  • Practical advice for permissions, publishing and change workflow
  • Clear boundaries between platform responsibility and agency responsibility
06

Shared responsibility

  • Subtle Difference manages the platform boundaries, infrastructure and core workflows
  • Agencies control user access, client permissions and publishing practices
  • Good password and access hygiene remains important
  • Recommended role and access settings are covered during onboarding
07

Application security controls

  • Permissions are enforced across navigation, direct URLs, records and administrative actions.
  • Site-scoped data is isolated between the clients individual websites.
  • Sensitive changes require authenticated and protected requests.
  • Access rules are regression-tested as the platform evolves.
  • Administrative roles can be restricted by module, action and record responsibility.

See whether RealMosaic fits your agency workflow.

Book a personalised demo to review your current client portfolio, theme workflow and first site rollout requirements.