Access, evidence and accountability, by design.

Permissions are defined per role and applied consistently to every user assigned that role.

Access can be scoped to a department, project, site or the whole company.

Administrators can review active sessions, issue temporary passwords and suspend accounts.

A standalone, searchable audit log records every controlled action with actor, timestamp and detail.

Records carry a confidentiality classification (Internal, Confidential, Restricted, Strictly Confidential).

Sensitive actions can require a specific approver or an independent closure verifier.

Financial and other sensitive data collections can be restricted to specific roles at the data layer, not just hidden in the interface.

Deployed on managed infrastructure with database backups — specifics depend on hosting configuration.

Enterprise identity integration is a planned capability for organizations standardized on Microsoft identity.

Additional authentication factors are on the platform roadmap.