Separated authentication
Mobile sync and admin access use different authentication mechanisms.
Architecture & security
Transparent data flow. Clearly separated boundaries.
The mobile client, sync service and administration console have distinct roles and trust boundaries.
System of recordServer database
Bound parameters
Data layerPersistela
REST · bidirectional gRPC
Authenticated session
Mobile clientAndroid + SQLite
Parameterized operations
Client values are bound as parameters, not concatenated into SQL.
Controlled visibility
The admin console uses REST and has no direct server database access.