Access controls for business records.

Hloliwe's platform uses two-step sign-in, tenant-scoped database access and a separate route for staff administration.

Sign-in checks a password and an authenticator code. Never share a password or authenticator code with another person.

PostgreSQL row-level policies use the authorised tenant context to restrict access to business records.

Cloudflare Access protects staff administration, with Access-token checks on staff API requests.

Audit-event entries are protected against ordinary update and deletion through database controls.

Ask for the data-handling and service terms relevant to your proposed setup before connecting business data.

Two-step sign-in
Every client user signs in with a password and an authenticator code.
Your records only
Database policies keep each business inside its own records.
Checked staff access
Hloliwe staff tools sit behind a separate access gateway, and each staff request is checked again.
Audit records that cannot be edited
Events are written to an audit log that ordinary updates and deletions cannot change.

Each layer is checked on its own, so one control never stands alone.