Enterprise security and compliance posture

Access controls

• Role-based access controls across workspace and system-admin scopes.
• Step-up MFA required for sensitive administrator actions.
• Per-organization authentication policies with tenant-aware access checks.

Auditability

• Centralized admin audit log for security and financial operations.
• Immutable audit mode with chained SHA-256 hashes for tamper-evident records.
• CSV export for evidence sharing during procurement and compliance reviews.

Data protection and resilience

• Production-safe debug defaults that reduce sensitive-data leakage risk.
• Document/file workflows retain upload metadata for traceability.
• Backup, incident response, and log-retention policy baseline is maintained and reviewed.

Security baseline artifacts

Security baseline document last updated: 2026-03-15