Your workspace.
Clear controls.

Workspace access

Owner, member and analyst roles carry different permissions. Server-side checks govern actions such as managing billing, inviting teammates, sending messages and approving investment decisions.

Protected access checks the current workspace membership. Removing a member revokes their workspace sessions.

Account protection

Password-based sign-in uses bcrypt password hashing and limits repeated login attempts. Signed sessions expire and require an active session record.

Session cookies use HttpOnly and SameSite protections, with Secure cookies in production. Signing out revokes the current session.

Private documents

Document downloads require authentication and a matching workspace. Uploads have an 8 MB size limit and a content hash. Downloads are served as attachments with private, no-store caching instructions.

Administrative access

LandOS platform administration requires a separate operator grant and permission checks. Support views are read-only, require a recorded reason and expire after 30 minutes.

Platform administration records the actor, action, reason and outcome. These platform audit records are append-only.

Data and privacy

Read our policies for information about data collection, retention and use of the service.