01 The verified hostname resolves the tenant, product entitlement and dedicated database reference before authentication is mapped to a product role.
- Dedicated database per tenant
- No browser-selected database identifiers
- Server-side feature and role checks
- Secrets held by the platform secret store
02 Documents live outside public web roots, pass type and malware checks, and are authorised on every download. Important changes append to a tamper-evident audit chain.
03 Marketing availability does not prove the authenticated product is available. Runtime access remains closed until the tenant, entitlement, feature and database are ready.