Organization isolation
Customer records are associated with an organization, and application access is filtered by organization.
Security
Designed around organization isolation and clear evidence handling.
This page summarizes the current MVP security approach. Formal certifications and advanced security features are not claimed.
Authenticated administration
The application uses session-based authentication for platform and organization administrators.
HTTPS deployment
The production design uses Nginx and TLS certificates so browser and API traffic can be served over HTTPS.
Evidence minimization
Backup Pulse is intended to collect backup evidence and status information, not the backup data itself.
Scoped integrations
The MVP uses inbound email evidence and HTTP check-ins rather than broad administrative access to backup platforms.
Continuous improvement
Security documentation, operational controls, and additional safeguards will be expanded before broader public launch.
Responsible disclosure
For the initial website, security questions can be sent through the contact page. A dedicated security address and disclosure policy can be added before public launch.