Security Overview
Threat model, data classification, encryption, secrets, authentication, sessions, application security (ASVS L2), uploads, tenant-isolation tests, audit, vulnerability management, pentests and incident response.
RBAC & Permission Matrix
The role model (seeded templates, custom roles, data scopes, field-level protection, segregation of duties) and the full tenant and platform permission matrix.
Privacy & DPDP Compliance
How Spyrl maps to the Digital Personal Data Protection Act 2023 and Rules, biometric and location consent flows, retention per data class, and DPIA triggers. Verify with counsel.