Trust

Know who can see your project.

Project access, private evidence and scoped finance workflows are implemented and locally reviewed. Live deployment and the remaining product roadmap have separate scopes.

Local flows reviewed; live checks pending

The boundary today

A pilot in preparation.
Locally reviewed flows.

BIO CNG operates this pilot. Accounts, project setup, private evidence and scoped finance workflows have local acceptance evidence. Live access, email delivery and recovery still need deployment verification.

Read the pilot data notice

Local acceptance evidence

Accounts and workspaces,
within a tested scope.

These checks used fictitious accounts and project records. They do not establish production security or certify the service.

Enquiry records: The application saves enquiry details privately for review and sends no automatic email. Live storage and access still need verification.
Enquiry access: Local checks verified saved records and a denied public inbox read. Permissions on the new backend must be checked after setup.
Account and workspace access: Local tests verified confirmed-account sign-in, separate customer workspaces, restricted project access and denial after session sign-out. Team permissions are separate from company ownership and finance agreements.
Saved setup: Setup drafts belong to the signed-in account. Local database checks verified saved answers, version conflicts and retry-safe project creation.
Retention: We keep data during the pilot. Email [email protected] to request removal; BIO CNG reviews requests manually, including which records must be retained. The application has no automatic deletion schedule.

The finance release

The current scope of each control.

Accepted local workflows, remaining product development and live deployment verification have separate scopes. Complete production recovery is still unverified.

Private evidence follows the record.

The application supports versioned PDF, JPEG and PNG evidence with current project access on downloads. Local native and browser checks passed in their stated scopes; private access on the pilot backend still needs verification.

Locally reviewed

A correction leaves a history.

The operational journal preserves original postings and linked corrections. Scoped cost, approval, payment, sharing, settlement, funding and first bank-loan journeys have local acceptance evidence; whole-product and live deployment acceptance remain separate.

Locally reviewed

Recovery has to include the documents.

Complete production restoration of database records and actual private files has not yet been verified. No recovery-time or availability commitment is claimed.

Unverified

Data handling must be explicit.

BIO CNG is the pilot operator. We keep data during the pilot and manually review removal requests at [email protected], including which records must be retained. Intended London hosting is identified in the data notice; live provider behavior and any future document processing remain under review.

Policy and checks pending

Pilot preparation

Checks still open.

Live customer collection requires the remaining policy and deployment checks below.

Actual live hosting, email, cookies and provider processing need final verification.
Production access verification, finance writes, private documents and complete recovery.
Any later certification or service commitment supported by its actual scope and evidence.