Authentication and MFA
Identity checks, multi-factor authentication and session protections help prevent unauthorised access.
ResiNotes Trust Centre
Your records deserve more than promises.
ResiNotes is built to keep each organisation’s information separated, access controlled and important actions accountable. Here is what that means in day-to-day use.
How protection works
Security should be visible in the way the platform behaves.
It is not a badge or a paragraph in a contract. It is how access is checked, how records remain attributable and how information stays within the correct organisation.
01
Access and identity
The right person, in the right context, with the right level of access.
Role-based access
Permissions are checked against the user’s role, tenant, home and current responsibility.
Tenant separation
Server-side controls keep one organisation’s information separate from another. Hidden menu items are never treated as security.
02
Accountability
Records should show what happened without losing who did what and when.
Audit history
Significant activity retains the user, time, source and relevant reason so actions remain attributable.
Record integrity
Corrections and additions should preserve the history rather than silently replacing the original record.
Incident response
Security events follow a controlled route for investigation, evidence, containment and communication.
03
Data stewardship
Your organisation should know where its information is held and what happens to it.
UK hosting and residency
Hosting and residency commitments are confirmed for the service being supplied and reflected in contractual information.
Data protection
Purpose, lawful processing, retention and data-subject rights are explained in the privacy information, not buried in sales language.
Export and offboarding
Authorised providers have a controlled route to their information when services or arrangements change.
04
Continuity
Services need to understand how access and recovery are maintained when something goes wrong.
Backup and recovery
Backup, recovery and continuity arrangements form part of operational assurance and are reviewed as the service develops.
Devices and browsers
ResiNotes supports current desktop, tablet and phone browsers. App availability is labelled separately when still in testing.
Procurement and assurance
Need evidence for a formal review?
We can provide current controlled assurance information relevant to your service, without publishing technical details that would weaken security.