Security
Governance built into the data model.
Organisation isolation
Every table is scoped to an organisation and protected by database row-level security. Users can only read rows of organisations they belong to.
Role-based access
Admins manage members and settings; analysts create facilities, imports, forecasts and actions; viewers read only. Roles are stored separately from user profiles and enforced in the database.
Audit trail
Imports, model runs, anomaly detection, scenario saves, actions and setting changes are written to an append-only audit log visible to members.
Data provenance
Each reading keeps its original value, unit and import batch. Derived results store the calculation version and parameters used.
Retention controls
Admins set a retention period per organisation and can delete readings older than that period.
Authentication
Email and password with confirmation, or Google / Lovable single sign-on.