Governance

Structured authority. Explicit boundaries.

Governance is not a feature. It is the condition of trust that preserves autonomy and operational integrity.

Tenant Sovereignty

Data, billing, configuration, and audit boundaries are tenant-isolated.
No cross-tenant financial aggregation or silent data blending.
No shared operational state across organisations.

Identity and Access

Authentication is centralised through id.xops.au.
Consent is recorded and tokens are issued with CSRF protections.
Authorisation is always tenant-scoped and explicitly delegated.

Support and Elevation

Support access must be granted by the organisation.
Elevation is time-bound and impersonation is explicit.
Every elevated action is recorded for traceability.

Audit and Traceability

Identity actions, access changes, and subscription transitions are immutable records.
Privilege elevation and interventions are durable events, not decorative logs.
Expression surfaces may vary, governance guarantees do not.