Security

Institution data is kept isolated; each institution reaches only its own.

Authorisation is role-based. Critical operations sit on an auditable trail.

Infrastructure is backed up regularly, and restores are rehearsed.