Trust
The controls, and their honest status
This page describes what the system enforces. It does not claim a certification, an audit or a penetration test, because AwardBase has none of those yet and saying otherwise would be the exact failure this product exists to prevent.
Enforced in the database, not only in the application
- Every tenant-owned table has row-level security FORCED, so the isolation applies to the table owner too.
- Tenant scope comes from a server-set session value derived from verified authentication claims. No client input can widen it.
- The application runtime role holds no write privilege at all. Consequential writes run through a separate governed role with column-scoped grants and no DELETE.
- Evidence, audit and authorization tables are append-only. There is no edit path and no delete grant.
Authorization
- Authorization is per exact record, deny-by-default, and evaluated server-side against durable capability grants.
- Consequential decisions bind to a specific record version, so an approval cannot survive a material edit to what was approved.
- A decision made by a person is recorded with the authority that permitted it and the exact state it was made against.
What is NOT claimed
Stated plainly because a security page that only lists strengths is a marketing page.
- No SOC 2, ISO 27001 or any other certification has been obtained or begun.
- No independent penetration test has been performed.
- AwardBase is pre-production. It has no production deployment and no customer data.
- Single sign-on, SCIM and customer-managed keys are not implemented.