Introduction
Glossary
Terms and acronyms used in the SSM.ro documentation, including SLA definitions
| Term | Definition |
|---|
| Commercial account | The account received by the client who signs the contract; may contain one or more organizations |
| Organization | Entity within a commercial account; each organization operates separately from the others (complete logical data isolation) |
| Super User | Role at the commercial account level; manages users, organizations, and roles |
| User | Role per organization; manages employees, documents, and reports |
| Control / Audit | Read-only role per organization (e.g. ITM, internal audit) |
| Employee Staff | Role per organization; access to their own documents and signing |
| Digital document | Document generated/managed within the platform |
| External archive | Storage destination chosen by the client, with automatic daily export |
| Term | Definition |
|---|
| Shared Model (SaaS) | Multi-tenant implementation on Heroku + AWS S3, with logical isolation per tenant |
| Enterprise Model (Dedicated) | Dedicated AWS infrastructure per client, on its own domain; SSO via SAML on the main domain, with email/password retained for external accounts; one or more organizations on subdomains |
| Acronym | Meaning |
|---|
| RBAC | Role-Based Access Control |
| IAM | Identity and Access Management |
| SSO | Single Sign-On |
| OIDC | OpenID Connect — identity federation protocol (SSO in the Shared model) |
| SAML | Security Assertion Markup Language — identity federation protocol (SSO in the Enterprise model) |
| MFA / 2FA | Multi-Factor / Two-Factor Authentication — in SSM.ro: email + password, plus a 6-digit TOTP code |
| TOTP | Time-based One-Time Password — a 6-digit code regenerated every 30 s (RFC 6238); in SSM.ro it is the second factor, displayed by the authenticator app or sent by email |
| OTP | One-Time Password (unique code, e.g. via SMS at signing) |
| WAF | Web Application Firewall |
| mTLS | Mutual TLS — mutual authentication with client certificates |
| Acronym | Meaning |
|---|
| GDPR / GDPR | Regulation (EU) 2016/679 on data protection |
| DPO | Data Protection Officer |
| DPIA | Data Protection Impact Assessment |
| DPA | Data Processing Agreement |
| ANSPDCP | National Supervisory Authority for Personal Data Processing (Romania) |
| eIDAS | EU Regulation on electronic identification and trust services |
| QTSP | Qualified Trust Service Provider — qualified provider of electronic signature services (eIDAS) |
| ITM | Territorial Labor Inspectorate |
| Acronym | Meaning |
|---|
| PITR | Point-in-Time Recovery |
| WAL | Write-Ahead Log (the PITR mechanism in Postgres) |
| CRR | Cross-Region Replication (S3 replication between regions) |
| SSE | Server-Side Encryption (encryption at rest in S3) |
| APM | Application Performance Monitoring |
| SOP | Standard Operating Procedure |
| CDN | Content Delivery Network |
| Term | Definition |
|---|
| SLA | Service Level Agreement |
| Availability (Uptime) | The percentage of time the service is operational within a reporting period |
| RTO | Recovery Time Objective — the maximum time to resume service after an incident |
| RPO | Recovery Point Objective — the maximum acceptable data loss, expressed in time |
| Maintenance window | Scheduled interval for maintenance work, excluded from the SLA calculation |
| Service credit | Compensation granted when the guaranteed availability level is not met |