Security, privacy and audit considerations

IR records contain sensitive employment and health-related information. Apply least-privilege roles, verify designation restrictions, protect file attachments, review Guest access, and test report permissions independently from form permissions.

Do not use production employee details in public documentation screenshots. Create dedicated demonstration employees and matters, or thoroughly redact images before upload.

Review retention, access logging, backups and incident procedures against organisational and legal requirements, including POPIA where applicable.