SouRCe
Privacy (draft — legal review required)
SOURCE stores organisation membership, product data, evidence metadata and workspace state in the environment's own Postgres project. Authentication is handled by Supabase Auth. Original evidence files are stored privately and are not published by uploading them.
Account deletion is not available in this milestone. Membership can be suspended without deleting audit history. This notice is draft product copy for a controlled invited pilot and requires legal review.