Tenant isolation
Every operational query is scoped to the authenticated organisation. Membership roles control administration, supervision, submission and read-only access.
TRUST CENTRE
Security built into every pre-start.
PreStartPilot separates company data, records operational changes, and protects access from the browser through to the database.
Authentication
Passwords are bcrypt-hashed. Browser sessions use signed, HTTP-only, same-site cookies with finite expiry. API credentials are stored only as SHA-256 hashes.
Auditability
Company creation, inspection submissions, password changes and other sensitive operations generate timestamped audit events.
Data protection
Production deployments are designed for HTTPS termination, encrypted off-site backups, private PostgreSQL networking and persistent evidence storage.
Secure development
Releases pass linting, TypeScript compilation and production builds before deployment. Database changes are additive and preceded by a backup.
Responsible disclosure
Security issues can be reported privately to the PreStartPilot operator. A formal disclosure mailbox will be published before general availability.