Company boundaries
Company context and membership are checked on protected operations. A company choice alone does not grant access.
Company-scoped access, authentication, MFA for sensitive actions and preserved audit evidence. See current controls and verification limits.
Company context and membership are checked on protected operations. A company choice alone does not grant access.
Protected workflows check authenticated sessions. Sensitive actions require the appropriate role and MFA assurance.
Permissions are evaluated for the actor, company and action. Sensitive records are not made public by this website.
Posted corrections preserve linked history. Review records retain evidence instead of replacing economic history.
Local tests and recorded, bounded staging checks support the implemented controls. These checks have specific limits; they do not establish that every deployed workflow has passed independent verification.
Public launch still requires deployed company-isolation and release verification. Live marketplace capabilities require separate approval and verification.
No SOC 2, ISO 27001 or PCI certification is claimed. Contractual security commitments and approved legal policies must be confirmed separately.