Access controls
Role-based permissions and reviewer boundaries require verification against the deployed application.
Responsible handling of grant information.
We distinguish design goals, implemented safeguards and features that require further verification.
Security and privacy approach
This page is informational and does not certify that planned controls are operational.
Data minimisation
The product approach favours metadata and references over unnecessary document uploads.
Encryption and backups
Deployment-specific controls, backup schedules and hosting regions must be verified before claims are published.
Enterprise features
Single sign-on, integrations and additional governance controls are roadmap or contract-dependent options.
Certifications
No ISO 27001, SOC 2 or other independent certification is claimed.
Strengthen compliance before the next financial report.
Explore how structured checks, review workflows and audit trails can support your team.