Concrete controls, clearly stated
Authenticated access
Accounts use email verification and password sign-in. Server-side sessions identify each researcher, and every protected API operation checks organization membership.
Scoped permissions
Organization membership and roles control read, write, administration, and report exports. A researcher must verify the same email address before a pending membership becomes active.
Preserved source data
CSV imports are bounded and validated. Original data, hashes, dataset versions, result configuration, author identity, and audit events are stored on the server.
Compute and deployment boundary
The live analysis kernel runs in a browser worker; derived results are stored with their execution metadata. The supplied FastAPI/PostgreSQL service needs a separate trusted deployment for centralized compute and server-controlled job execution.
No security certification, regulatory compliance, external audit, enterprise SLA, or immutable legal audit guarantee is claimed. Enterprise controls and wider team access require deployment-specific configuration.