IDENTITY
Protected access
Strong passwords and two-factor authentication strengthen account protection and reduce password-only risk.
SECURITY POSTURE · OPERATIONAL GOVERNANCE
Security designed to keep access, data and activity under control.
ISOPILOT combines authentication, roles, organisational segregation and traceability to support controlled use of the platform and the documentation managed in the workspace.
Technical and organisational controls, with clearly separated responsibilities.
CONTROL FRAMEWORK
Six control layers, one operational perimeter.
Safeguards are organised to reduce improper access, document dispersion and unattributed activity. Each layer contributes to the overall governance of the workspace.
AUTHORISATION
Separated roles and privileges
Available functions depend on the assigned role. Users operate within the perimeter aligned to their responsibilities and access level.
SEGREGATION
Organisational perimeter
Companies, projects, documents and revisions are linked to the relevant organisation to avoid operational mixing between separate workspaces.
DOCUMENT CONTROL
Readable versions and ownership
Documentation is managed with states, revisions and ownership, making it clearer which content is current and who governs its lifecycle.
TRACEABILITY
Relevant activity can be reconstructed
Administrative operations and significant changes can be linked back to their operational context to support controls and reviews.
HUMAN OVERSIGHT
Professional oversight
Automation supports the work but does not replace review by responsible people. Outputs and decisions remain subject to verification and validation.
DATA GOVERNANCE
From sign-in to document: control follows the entire journey.
Security is not treated as a single feature, but as a sequence of coordinated safeguards spanning identity, organisation, project, document and review activity.
DPA · Art. 28 GDPR →
SHARED RESPONSIBILITY
The platform protects the perimeter. The organisation governs people, content and decisions.
Platform safeguards
- Authentication and session controls
- Role management and workspace separation
- Traceability of system-supported activity
- Contractual documentation and support channels
User safeguards
- Correct assignment of accounts and privileges
- Quality, lawfulness and currency of entered data
- Review and approval of produced content
- Application of procedures and measures in the real environment
SECURITY & PRIVACY REVIEW
Do you have specific security, privacy or procurement requirements?
Review your requirements with the ISOPILOT team before activation and request the documentation available for your internal assessment.
SECURITY · QUICK ANSWERS
Which security safeguards does ISOPILOT apply?
Platform security combines technical controls, segregation and operational traceability.
Does ISOPILOT support two-factor authentication?
Yes. The platform supports 2FA and differentiated roles to reduce the risk of unauthorised access to private areas.
Are customers separated from each other?
The application architecture uses organisational segregation and authorisation controls to keep users, companies, projects and documents separated according to assigned roles.
Does the Security page amount to a security certification?
No. It describes platform safeguards and governance. Any official certifications are published separately in the Trust Centre with the corresponding document.