01 · AccessWorkspace access
Every portal request resolves the member against the current workspace before permissions are evaluated.
- Owner, admin, developer and viewer roles
- Server-side permission checks on every mutation
- Single-use invitations expire automatically
- Removed members lose access on their next request
02 · SecretsCredentials and encryption
Secrets stay behind server seams and are never included in public workspace responses.
- API keys are displayed once and stored as digests
- Webhook secrets are encrypted at rest
- Sessions use signed HttpOnly cookies
03 · BillingAuditable commercial state
Provider events, subscriptions, invoices, and product entitlements are stored separately and reconciled explicitly.
- Duplicate webhook deliveries are idempotent
- Payment failures remain visible
- One product cancellation does not revoke another
04 · PrivacyGDPR and customer data
Entity Intelligence minimises public-form and operational data and defines production roles in the agreement and DPA.
- No sale of personal information
- Lawful transfer mechanism required outside the EEA
- Access and deletion through the published contact
05 · OperationsOperational safeguards
The application ships explicit readiness checks, security headers, metering ingestion, and authenticated status updates.
- Uncached liveness and readiness endpoints
- Usage events are immutable and deduplicated
- No invented uptime before observations exist
06 · AssuranceScope of assurance
This page describes implemented controls; it does not claim ISO 27001, SOC 2, or another certification.
- Customer SLA is contractual
- Subprocessors are confirmed before production
- Security questions are handled during procurement