Security

Encrypted evidence storage, signed sessions, CSRF protection, tenant-scoped authorization, audit events and secure headers are built into the application.