Security, privacy and data isolation
How each organisation’s data is kept apart, the sign-in controls you hold, what members can download, and what the assistant cannot see.
In short
- Every organisation’s data is isolated at the database row level, with application checks on top.
- You choose two-factor requirements, session length and allowed email domains.
- The assistant never sees direct messages, notes, payments, survey answers or unpublished content.
Every organisation's data lives in one system, so keeping it apart is the property everything else depends on.
Isolation in the database
Every organisation's records are separated at the database row level. Row-level security is enforced by the database itself, so a query not scoped to one portal returns nothing rather than everything. The application also refuses any query that does not name a portal, and every page re-checks that the signed-in person belongs to the portal they are viewing.
One sign-in, many portals
One account can belong to several portals. Each is a separate relationship: a data download covers one portal only, and erasure from one portal does not touch a person's account with another.
Your sign-in policy
Administrators choose the sign-in methods offered (email and password, Google, email link); whether two-factor authentication is required for nobody, for administrators and content managers, or for everyone; the session length before a fresh sign-in is needed; and which email domains new members may join from.
Members' rights
Every member can download everything the organisation holds about them from Settings, then Privacy. Erasure is carried out by the organisation: identifying details are scrubbed, financial records it must keep are unlinked from the person, and discussions others took part in are preserved.
What the assistant can see
It answers only from content every member may already see: published events, news, insights, resources, the directory and discussions, plus the asker's own membership facts. It never sees direct messages, staff notes, individual payments, survey answers or unpublished content.
Support requests
Problems you report to the Portava team are never indexed for the assistant.