Security & audit
Financial data that is protected and accountable.
Passwords are hashed, sessions are secure and HttpOnly, every financial mutation runs inside a database transaction, and every important action is written to an audit log you can review.
Authorised at every step
Every action is checked on the server against the caller’s role. No client-side shortcut, no reusing another account’s permissions. The Agency reads the whole business but cannot change a single entry in it. A branch runs its own books and cannot reach another.
Audit-ready history
Every important action is written to an audit log you can review: sign-ins, registrations, sign-outs and financial movements. Reversals create compensating entries instead of silent delete, keeping history complete.
Your data, protected
Passwords are hashed before they are ever stored, sessions are secure and HttpOnly, and the application is built against a database connection that never exposes your credentials. Financial data is encrypted in transit.
Integrity by default
Financial mutations run inside database transactions, so a partially applied entry cannot leave your books half-written. Combined with idempotency keys, the system makes accidental or partial writes extremely unlikely.