Authenticated tenancy
Supabase Auth sessions and PostgreSQL row-level policies isolate every workspace and project.
TRUST THROUGH ACCURACY
Clear about what is secure now—and what comes before production.
ArkHimar PM does not claim certifications or enterprise controls it has not earned or implemented.
Minimal analytics
The provider-neutral event layer excludes project narratives, financial values, risks, stakeholder identities and document contents.
Truthful claims
SSO, SCIM, private cloud, on-premise, SLA and compliance certifications are not advertised as live.
Private storage
Private objects, membership policies, file limits and 60-second signed download links.
Append-only audit
Database triggers record project changes; authenticated clients cannot alter audit rows.
File quarantine
Malware scanning and quarantine remain required before unrestricted confidential uploads.
Responsible disclosure
Report a suspected security issue privately through projects@arkhimar.com. Do not include exploit data in public channels.