Data Protection and Security Summary

Protected Records

All documents sent, received, signed, uploaded, attached to employees, linked to PPE, or stored in the system should be handled as protected company records.

Controls Active In The System

• Encrypted uploaded files.
• Login required for document/file access.
• Role and permission checks across HR, documents, inventory, maintenance, equipment, and settings.
• Audit logging for backend actions.
• Signed records with signature, date, time, and original document reference.
• Session cookies with HttpOnly and SameSite protection.

Operational Rules

• Keep admin accounts limited to trusted persons.
• Use strong passwords and do not share accounts.
• Keep backups protected and access-controlled.
• Review old users, roles, and archived employee records regularly.
• Use HTTPS/public domain configuration so document links and cookies are protected in transit.