Security & Data Handling

• Access controls are used to separate owner/admin users, beta rep users, and partner portal users.
• Role-based permissions restrict owner-only settings, beta-user management, feedback visibility, partner access, and document actions.
• Document/file access is protected through authenticated routes where implemented, with additional checks for partner visibility and assigned programs.
• Partner visibility is limited by assigned programs, audience, active status, agreement/resource permissions, and workspace context.
• Admin controls support partner approval, deactivation, document management, and workspace-specific configuration.
• Data minimization is encouraged: users should only enter or upload information needed to operate their workspace.

Report suspected unauthorized access, document exposure, security bugs, or account compromise to security@residual-os.com.

No system is 100% secure. ResidualOS users should use strong passwords, protect their devices, verify partner and document permissions, and avoid uploading unauthorized sensitive data.