security

Ask precise security questions.

Understand the boundaries around accounts, records and connected services.

EVIDENCE INDEX

Review controls by context.

No certification or compliance status is asserted by this design. Each published claim needs its evidence, scope and review date.

Accounts and access

Separate sign-in, membership, permission and access to a source account.

Records and sharing

Review who owns a record and who can access its evidence.

Report a concern

Prepare a private report. Keep credentials and sensitive records out of the initial message.

KEEP THE TASK MOVING