Security & trust

Tenant isolation

Every row of your data carries your company's id, and the database itself enforces the fence with Row-Level Security, not app code that can forget to filter.

61 dedicated isolation assertions run as a release gate: two companies with identical client names cannot see each other's rows or files.

Verified evidence

Photos go to private storage only. Viewing one mints a short-lived link that is good for a single, audited view.

At upload, the server re-hashes the real bytes against what the device declared and validates the file container. Personal metadata, EXIF and GPS tags included, is stripped automatically before a photo is accepted as evidence.

Append-only history

Attendance and task history is never overwritten. Corrections are new records that carry a reason.

Checklists and settings are versioned, so what a past shift required can never be silently rewritten.

No keys in the client

The mobile app and the web bundle carry no privileged credentials, and there is no client-writable table at all. Every change is a named server-side command that the database checks against who you are and what your plan allows.

Employee dignity

Location is captured at check-in and check-out and nowhere else. There is no background tracking.

Anything odd lands in a review queue that says “needs review”, never an accusation. Lock-screen notifications keep their wording minimal: no names, no client details.

Quality management

MAYDAN produces controlled, traceable, audit-ready evidence that supports your quality-management system.