Security policy, Team & Audit log

Platform-wide rules for your own team and every tenant

Super admin security

Two-factor login required for all super admins

IP allow-list for the super admin panel

Impersonation needs tenant consent + is time-limited

Patient data masked during impersonation

Two-person approval for suspend / delete / restore

Session timeout20 min idle

Alert on unusual login or mass export

Tenant defaults

Encryption at rest · AES-256 · per-tenant keysOn

Tenant data isolationSeparate database per tenant

Default data regionSingapore · Mumbai replica

Backup retention90 daily · 12 monthly

Tenant export on requestWithin 24 h · encrypted

Deleted tenant data kept30 days, then purged

Brute-force lockout5 tries · 15 min · alert

Team & roles

+ Invite

Salauddin Jewel · FounderOwner · all access

Tanjila · account managerCustomer success

Rakib · supportSupport · no billing

Finance (accountant)Billing only

On-call engineerPlatform · no tenant data

Roles: Owner · Customer success · Support · Billing · Platform engineer · Read-only auditor. Tenant patient data is visible to no role except during consented, masked impersonation.

Audit log · super admin actions

Export

12:44 · Tanjila · impersonated Green Life (consented, masked) · 12 min · viewed print settings

11:58 · Salauddin · approved offline payment HP-2026-1041 · Lab Aid Group

11:20 · Rakib · queued Local Server update v2.4.1 · Lab Aid Group

10:05 · System · dunning stage 3 · City Care Clinic · task created

09:30 · Salauddin · changed feature flag ai_report_explainer 10% → 25%

Yesterday · Salauddin · suspend Sunrise Clinic · approved by Tanjila (two-person)

Yesterday · Finance · issued credit note CN-2026-0012