SECURITY & CONTROL
Access with accountability.
The application has account, company and audit controls. Deployment security and compliance requirements must be evaluated for your environment.
Account accessPassword sign-in, account lockout controls, optional two-factor authentication and configurable single sign-on are implemented. SSO requires a configured provider.
Roles & permissionsUser roles and company assignments govern access. Server-side checks authorise product entry and protected operations; a visible button is not an access grant.
Company boundariesCompany-scoped operations use the authorised company context. Permissions and store assignments further control Retail access.
Session managementThe application supports session records, sign-out and revocation. Shared computers should use individual accounts and be signed out after use.
Audit recordsSign-in events and supported business actions are recorded in the audit system. These records support review and traceability.
Deployment & complianceNo SOC 2, ISO certification, regulatory approval, uptime guarantee or recovery commitment is claimed here. Discuss hosting, retention and backup requirements before deployment.