Authentication
Laravel session authentication, strong password rules, reset links, session regeneration, throttling, and administrator-only TOTP controls where enabled.
Controls we actually implement.
We do not use certification, insurance, regulatory, or custody claims. This page describes the application controls available throughout the portal.
Ledger integrity
Integer minor units, balanced journals, database transactions, row locks, idempotency, overdraft checks, and compensating reversals.
Access and audit
Role gates, ownership-scoped queries, CSRF protection, redacted append-only audit events, and immediate session invalidation on restrictive decisions.