Security

How access is protected

The short version: nobody gets in unless they're on the list, every request is checked again, and the engine makes its own decision about every call.

Getting in

Sign-in is through Google, and an account must be on the firm's staff list. Suspending someone or ending a session takes effect on their next request.

Reaching client records

The engine has no public address. It's reached through a private tunnel that only this site can use. Each person has their own key for each role, kept encrypted and never sent to the browser, so the engine knows who is asking and applies its own permissions to every call.

In the browser

Pages may load scripts only from this site and can't be framed by another site. Signed-in pages are never stored by caches. Connections are always encrypted.

The record

Administrative changes need a stated reason and are written to an append-only trail in the same step. Important engine actions go on the engine's own audit trail as well.