9 lines
537 B
Markdown
9 lines
537 B
Markdown
# 09 — Security & Compliance
|
|
|
|
- Roles: `super_admin`, `tenant_admin`, `member`; guest upload via signed tokens.
|
|
- Policies: all tenant-owned models gated; Super Admin bypass via explicit ability.
|
|
- Audit: record impersonation and destructive actions with actor, target, reason.
|
|
- Logging: structured, no PII; add request/trace IDs; redact secrets.
|
|
- GDPR: retention settings per tenant; deletion workflows; legal pages managed via CMS-like resource.
|
|
- Rate limits: per-tenant, per-user, per-device; protect upload and admin mutations.
|