Client access
Secure client portal activation is evidence-gated.
The public website does not expose a pretend login or an unqualified admin surface. Client access will be activated only when identity, tenant isolation, permissions and the production route have passed the required controls.
Portal requirements
Authentication must be real before the button becomes active.
- Identity and role model qualified.
- Tenant isolation independently tested.
- MFA / SSO and session controls implemented as applicable.
- Client-visible data scopes reviewed.
- Audit and support pathways enabled.
- Production TLS and routing qualified.
