CFC Desk Security
1. Transport security
All traffic to 5471.work and its subdomains is served over HTTPS/TLS terminated by Cloudflare. There is no plain-HTTP access to the application.
2. Sign-in
Every sign-in is verified by Cloudflare Access before it reaches the application. Access supports signing in with Google, with Microsoft (Azure AD / Entra ID), or with a one-time code sent to your email address. There is no public sign-up; every account is created by the operator.
3. Workspace isolation
Each user's uploaded documents and produced outputs are kept in a workspace isolated from other users.
4. What server logs do not contain
During this test program specifically: the operator does not write real names, SSNs, EINs, uploaded file names, or entered content to server logs; each user's documents are kept in a workspace isolated from other users; and an administrator may access minimal account information (email, role, creation date) only to manage accounts (role changes, disabling, deletion).
5. Backups
The database and uploaded files are backed up automatically once a day (02:00, via a Windows scheduled task). The database snapshot is taken with SQLite's own online-backup mechanism so it stays consistent even while the service is running; it is combined with the uploaded files into a single archive per run and written to a separate disk on the office server. Backups are kept on a rolling 14-day schedule. During this test program, backup archives are not encrypted; encryption of backups is enabled at general availability.
6. Where the server runs
The application currently runs on an on-premises server located in the United States, reachable only through the Cloudflare connection described above (no ports are opened directly to the internet).