Security and privacy

Separate organisation data, minimal access and evidence of every important decision.

The system uses an explicit workspace context, permissions checked on each request, multi-factor authentication, additional identity checks and independent approval. We do not promise automatic legal or tax compliance.

Identity

No shared accounts; multi-factor authentication and a fresh identity check for high-risk operations.

Data

Persistent community data is held in separate workspaces. Support access is time-limited and audited.

Leaving the service

Full export and controlled offboarding remain part of the product’s scope.