Identity
User authentication uses Clerk and accepts only the token type configured for each surface.
Trust
Platform security
Pointomnia applies shared technical contracts without treating user identity as an authorisation source.
Authorisation
The server validates active organisation membership and the Membership role before authorising each operation.
Separation
The organisation is explicitly selected; each product keeps its own operational context and data.
Audit and files
Auditable operations use the shared audit core and files follow common storage contracts.
Availability
Public incidents and maintenance are communicated through Hub Status.