DRAFT FOR ATTORNEY REVIEW. This page has not been reviewed by a lawyer yet.
Security contact
Report a security problem
Email info@accesspatrol.net.
Say what you found, where, and the steps to see it. Do not include other people's personal information.
What is in place today
- Access to records depends on sign-in, role and agency, and is checked on the server as well as in the page.
- Actions are recorded in an audit log, and each finished day of the log is sealed with a fingerprint chained to the day before, so a later change shows up.
- The support form limits repeated submissions: five in ten minutes for each signed-in account.
- A read-only data export exists so an independent backup can be taken. Only the founder's own verified account can run it, and it leaves out account records. No scheduled backup runner is in place yet.
- Demo data is kept apart from live data and is marked as demo. Demo shifts are never written to the company calendar.