Security and trust

Every organization-owned record carries its organization. Access rules are enforced by row-level security in PostgreSQL, so one tenant can never read another tenant's data — even if an interface is bypassed.

Roles and permissions are stored as data, assigned per organization membership, and checked server-side. The interface hides what you cannot use; the database refuses it.

Administrative actions are recorded with actor, organization, resource, before-and-after values and timestamp. Historic assessment, certificate and payment records are never overwritten.

Course content, assessment uploads, certificates and contract documents live in private storage buckets reached through short-lived signed URLs.

Email and password, magic links, password reset, email verification, Google and Microsoft sign-in — with an architecture ready for MFA and enterprise single sign-on.

Country, currency, timezone, language and formatting are configured per organization. Nothing is hard-coded to a single market.