Each client's data, kept apart.

Measures

• Per-client isolationEnforced in every query and backed by database triggers.
• Explicit accessProvider staff only enter a client through an access grant.
• No passwordsSign in with a 6-digit code sent by email, valid for 10 minutes.
• 8-hour sessionsWith history, and revocable at any time.
• Signed commandsEd25519 on commands and policies. Agent tokens rotate.
• Encrypted secretsUnattended-access passwords stored with AES-256-GCM.
• AuditA searchable, exportable log of who did what, where and when.
• Self-hostingYou can run CoreDesk on your own infrastructure.