Access controls
The application uses authentication, role and policy checks, institution scoping, rate limits and configurable account-security controls. Email verification and two-factor requirements depend on operator settings.
Documents and downloads
Uploads have validation and access rules. Malware scanning depends on the scanner configured by the deployment operator; it must not be assumed to be active everywhere. Restricted media uses authorized delivery paths and expiring access where implemented.
Report a concern privately
Use the contact page with the security topic. Describe the affected area without sending passwords, live secrets or other people’s private records. The public website does not claim an independent security certification or promise a response deadline.
A question about what this means for you?
The platform team can clarify the arrangements for this installation and your institution.
Get in touch ↗