Security is part of the architecture, not an add-on.

• Role + Permission + Scope

  Access is controlled by role, explicit permissions and data scope.

• OFFICE isolation

  One agency workspace cannot access another workspace's operational data.

• Private document storage

  Files are stored privately; permanent public URLs are prohibited.

• Temporary access

  Authorized document access uses temporary signed URLs.

• Audit

  Critical actions and sensitive access are logged.

• Internal vs client-visible content

  Internal notes remain staff-only.

• Retention and archive

  Archive does not mean uncontrolled hard deletion.

• Authentication

  Secure sessions; one-time codes for the client portal; rate limiting on every login.

We publish only what is implemented. IDVIS does not claim certifications, uptime percentages or hosting guarantees that have not been verified.