Security

Workspace isolation

Merchant data is scoped to the signed-in business. Privileged credentials are not sent to the browser. A workspace identifier in a URL does not grant access on its own.

Authorisation

Sign-in, financial changes and any future claim or billing action run on the server with explicit authorisation.

Evidence

When a claim is sent, the evidence pack is intended to stay as it was at send time even if a source system later changes. That claim workflow is not live yet.