Trust
Security & privacy
Handling tenant PII responsibly isn't an afterthought — it's structural.
- Minimum necessary PII collected
- Mandatory review/redact step before photos are stored
- Encrypted in transit and at rest
- Short-lived signed photo URLs — never public links
- Full audit logging of sensitive actions
- Role- and organization-scoped access on every request