Security

This page is maintained by the DashView operator and describes app-visible controls and current operating practices. It is not an independent certification and does not claim compliance with any specific standard unless your organisation has been provided with separate written confirmation.

Email-and-password authentication is provided by the underlying managed authentication service. Sessions are maintained using secure browser storage. Administrators can revoke organisation access at any time.

Access within an organisation is governed by role-based permissions enforced at the database layer through row-level security. Roles include administrator, director, planning team, project manager and read-only.

The platform is hosted on a managed cloud provider with encrypted transport between the user's browser and the platform.

Mutations to governed records are recorded in an append-only audit log within your organisation's scope and surfaced through the in-app audit history.

The operator is responsible for platform security controls. Your organisation is responsible for role assignment, account hygiene and content classification. Individual users are responsible for protecting their credentials.

Suspected vulnerabilities should be reported in confidence to the operator's security contact. The operator will acknowledge receipt and coordinate remediation.

For security and privacy enquiries, please contact the operator using the email address published in your organisation's subscription documentation.