Security and data access.

Separation

How are workspaces kept apart?

• Contractors see only their own workspacetheir profile, documents, workers and vehicles, and what each client asks of them — never a client's other contractors.
• Clients see a contractor only once connectedthe contractor joins or adds the client with the client's company code, or gives the client its own contractor code. Until then, the profile is invisible to that client.
• Each client's decisions stay with that clientreviews, notes, overrides and the audit trail belong to the client's workspace, not to the shared contractor profile.
• Vehicles are shared read-onlyclients can see a contractor's vehicles and suspend one, but can't edit the contractor's records.
• Gate staff see what the gate needsthe Gate / Security role sees a worker's readiness for the site, not the rest of the record.

Audit log

What does the audit log record?

Every action, with who did it, when, and what changed. Corrections are new entries, so the history stays intact.

• Reviews and approvalsdocuments, cards, contractors and workers approved, rejected or requested.
• Overrides and suspensionsreadiness overrides with their reason and end date, contractors and jobs suspended with a reason.
• Site decisionspermit changes from request to close, bookings, and every gate decision with its reason.
• Filters and exportfilter by person, action, record type or severity, search, and export to CSV. The Auditor role reads it without changing anything.