Security

Practical controls, honest claims, continuous improvement.

We design Diwanio around least privilege, traceable actions, resilient operations, and clear communication.

Last updated: 28 July 2026

  1. 01

    Access and identity

    Workspace access is role-based and intended to keep company data within authorised teams.

    Authentication and sensitive actions are protected with application controls and auditable events.

  2. 02

    Data handling

    We minimise the data required for each workflow and separate customer workspaces logically.

    Transport protections and managed storage controls are used as part of the application architecture.

  3. 03

    Operational practice

    Dependencies, application changes, and production access are managed through controlled engineering workflows.

    No certification is implied unless it is explicitly named and independently verifiable.

  4. 04

    Report a concern

    If you believe you have found a security issue, contact us with enough detail to reproduce it. Do not access or change data that is not yours.

Bring the next financial review into one visible workflow.

Start with the documents you already have, assign the missing context, and hand over the records behind each number.