Isolation
Every business record carries a company identifier and every query is filtered by it. Roles can be scoped to a single project with validity dates.
Authentication
Email and password with strong-password rules; self signup is closed, so only invited users can join a workspace. Platform administration actions are logged separately.
Audit trail
Creates, updates and deletes on governed records are written to an immutable audit log with before/after values.
Data integrity
Document numbers are generated atomically. Data-date moves are recorded with a reason. Unknown values stay unknown — nothing is fabricated.
Hosting
PostgreSQL with encrypted backups; HTTPS everywhere in production.