Every dashboard gets its own locked front door.
- Each dashboard is served from its own isolated origin, so uploaded HTML can never reach your session or another team's data.
- Grant access by person or by role. Permissions are enforced in the database, not just the interface.
- Every view and admin action is recorded — who saw what, and when.
Origin isolation · Content-Security-Policy · Row-level security