Identity is not permission
Google sign-in establishes a person's identity. Membership and role approval determine whether that person may access an organisation. A company email domain on its own is not a permission grant.
Offline-first storage
Previously authorised devices hold local records to support work where internet access is unreliable. Local device data is sensitive: browser storage should not be cleared without a verified backup.
Cloud synchronisation
Supabase stores synchronised projects, investigation locations and records. Conflict handling and recovery checkpoints are part of the workflow, but all critical projects should be validated under field conditions.
Organisation archives
Where configured, a separate backend connection maintains Google Drive archives of synchronised project data. These are different from local device backups. Device-only offline changes and separately managed attachments may not be included.
Confidential investigations
Organisations remain responsible for ensuring that data is stored only in approved services and that access is granted to authorised personnel. See our Privacy Policy for details.