Authorization
Server-side policies and permission gates. Tenant organization scoping on business data.
Security
Practical controls for a financial back-office. No fabricated certifications.
Sessions
CSRF protection, secure cookies on HTTPS, login throttling, inactive-user blocking.
Integrity
Reversal-based corrections, idempotent settlement keys, read-only integrity checks.
Exports
Role-gated CSV exports with spreadsheet formula-injection mitigation.
Backups
Timestamped database dumps stored outside the public document root.
Transport
HTTPS with HTTP redirect on the KHATAIQ staging host.