Security
Controlled access and evidence boundaries.
Production access is company-controlled. Records keep their boundaries from the first entry to the final report.
- Access control
- Company-provisioned accounts, role-based access, and tenant isolation enforced in the database.
- Sessions
- HttpOnly cookies. Browser code never sees a token. Sessions rotate on login and expire.
- Records
- Append-only audit trail enforced by triggers. Signatures bound to the record hash.
- Data
- Customer records stay in the provisioned workspace. No public self-registration.
Report a security concern to the contact address. Production access is company-controlled.