Tenant and role separation
Organizations, clients, projects, cases and evidence are restricted by tenant scope and permission. Platform access requires separate super-administrator authorization.
安全与完整性
Protecting accounts, tenant data, evidence and the public service surface.
本翻译仅为便于理解。法律上以德文版本为准。 Deutsch
Account protection
Passwords are stored as salted hashes. Login lockout, email verification, optional authenticator-based two-factor authentication and revocable sessions are supported.
Transport and browser security
Production operation requires HTTPS, secure cookies, strict origin checks and security headers. Public forms use bot traps, signed timing checks and persistent rate limits.
Evidence integrity
Original files and generated exports use SHA-256 manifests. Technical source material is kept separate from analysis and legal notes.
Operational safeguards
Health checks, backups, recovery tests, provider diagnostics and audit records are part of the production readiness process.
Responsible disclosure
Potential security issues should be reported privately to kontakt@borban.de with sufficient detail for reproduction.