Security is a shared discipline
We describe the safeguards we can substantiate and avoid treating a label as a substitute for careful implementation.
Organization boundaries
Tenant-owned records are designed to remain within the organization that owns them.
Role-based access
Directors, supervisors, counselors, intake staff, and clients receive different access based on their responsibilities.
Session controls
Authentication and session boundaries limit how long and from where protected actions can be performed.
Encrypted transport and private storage
Connections use encrypted transport, and protected files use private storage paths with authorization checks.
Auditable operations
Sensitive platform activity produces records that support investigation and operational accountability.
Your ministry still has responsibilities
Technology cannot replace sound policies, access reviews, staff training, careful configuration, incident response, or legal counsel. Beta conversations include the boundaries of the current product so each ministry can make an informed decision.