Security
Your operational data stays yours
Operational assessments are sensitive. Isolation between workspaces is treated as a security boundary.
Workspace isolation
Every company and client workspace is separated by database-level access rules. A user can only read rows for workspaces they belong to — enforced on the server, not just hidden in the interface.
Consultant boundaries
Consultants see only the client workspaces they manage. Client users never see other clients, or even a list of them.
Encryption
All traffic is encrypted in transit with TLS, and stored data and uploaded documents are encrypted at rest.
Access controls
Owner, admin and member roles, one-time invitation links, Google or email sign-in, and private document storage with short-lived download links.