VII — Security
Security & confidentiality
Cases are private. Nothing is published without consent.
Case protection
- Private cases
- Secure access
- Per-user case separation
- No automatic publication
- No public use without consent
Secure access
- Protected login
- Session management
- Device tracking
- Two-factor authenticationplanned
- Controlled sign-outplanned
Confidentiality
- Confidential documents
- Restricted access
- Audit logrolling out
- Traceability
- No public exposure of cases
Hosting and compliance
- Hosting to be specified
- GDPR where applicable
- Encryption in transit
- Secure storage
- Access control
No security is promised until it is active. Planned but undeployed features are marked “planned” or “rolling out”.