Private storage
Proof files stay private in AWS S3, served through permission-checked signed links.
Trust Centre
Security is the product, not the wallpaper.
Capshur exists because frontline proof disappears, gets disputed, or gets shared in the wrong places. The platform is being built around private proof, controlled sharing, role permissions and audit signals.
Worker vault boundary
Payslips, incidents and private notes are not manager-visible by default.
Review trails
Record events, manager actions, cases and exports are logged for traceability.
Redaction rails
Evidence sharing can pass through a redaction request and review process.
Role-based access
Worker, manager, company admin and platform controls stay separated.
Data governance
Retention, export jobs, privacy requests and legal hold flags are being built in.