Security and data access principles
AzfiBooks should protect business records through secure login, role-based permissions, isolated company workspaces, audit trails and controlled administrative access.
- Secure login with CSRF protection and session controls.
- Company/workspace data separation through tenant-aware access.
- Role-based permissions for owners, accountants, staff and support users.
- Audit logging for important activity and sensitive actions.
- Controlled support/admin access to client data only through approved workflows.
- Private configuration files should not be publicly accessible.
- Backups and exports should support business continuity and accountant review.
- AI features should explain and suggest; they should not post, edit, delete or reverse records without human approval.
Do not upload real client data to a demo company. Demo data should always be fictitious.