Access Control
Tenant roles, customer portal grants, and internal support roles are separated at the backend policy layer.
- Tenant-scoped queries
- MFA for privileged roles
- Support access audit logs
- Session revocation
Security
DamperOps is planned around least-privilege access, private file delivery, audit logging, and future SOC 2 readiness evidence.
Workflow
Every page uses the same source-of-truth model: tenant, job, asset, inspection item, media, deficiency, report, audit.
Tenant roles, customer portal grants, and internal support roles are separated at the backend policy layer.
Private media and report documents are delivered with signed access, not public buckets.
Critical actions produce append-only audit events that support incident response and report defensibility.
FAQ
The field workflow is designed around downloaded job packs, local drafts, queued media, and retry-safe sync.
Yes. The product model includes QA approval, immutable report revisions, release actions, email delivery, and a customer portal.
The backend owns entitlements and syncs subscription truth from Stripe webhooks.