Skip to main content

Security and privacy basics

DeForsight is designed for organization-scoped work. The safest workflow is one that keeps access narrow, credentials private, and review decisions explainable.

Account security​

  • Passwords are never displayed in the application.
  • Passwords are stored as hashes, not plain text.
  • Password setup and reset links are short-lived and single-use.
  • Sessions can be revoked after a password change or administrative action.
  • Never share a password, reset link, or session cookie with another person.

Workspace boundaries​

Users work inside one workspace. Workspace-scoped API queries prevent ordinary users from reading or changing another workspace’s records.

Responsible evidence handling​

Only upload documents and supplier information that your organization is allowed to process. Keep notes factual, avoid unnecessary personal information, and follow your organization’s retention policy.

When something looks wrong​

Stop using the affected account, capture the time and page where the issue occurred, and contact your workspace administrator. Do not paste passwords, reset tokens, or private supplier documents into a support message.