Verified account access
Firebase Authentication, email verification and protected password recovery support secure access to each workspace.
Security by design
Protection built into every layer.
Certinance checks identity, organisation membership and role permissions whenever protected records or private PDFs are accessed or changed.
Verified accounts
Organisation boundaries
Role-based access
Private PDF delivery
Access control
The right access for each responsibility.
Every protected action is checked against the signed-in person's active organisation membership and role. Viewers can review permitted records; sensitive changes stay with Owners and Administrators.
- Tenant-scoped records and membership checks
- Server-side authorisation for protected operations
- Cross-organisation requests denied
Workspace access3 roles
- OOwnerWorkspace, billing and team controlFull access
- AAdministratorManage documents and membersManage
- VViewerReview permitted recordsRead only
Practical safeguards
Controls that support responsible document management.
Private PDF delivery
Private PDF versions use authenticated delivery. Each download requires a fresh membership and document access check.
Controlled document deletion
Eligible document deletion requires an authorised role, explicit confirmation and server-side checks. Whole-workspace closure remains a verified manual process.
Security is a shared responsibility
Certinance supports document control and renewal planning. Your organisation remains responsible for checking its records, choosing appropriate access and meeting its legal obligations.