Sign in

Authorised users only. Access is granted by role.

Security and session notice This is a private system holding commercially sensitive and personal information. Your session lasts 12 hours in an httpOnly cookie and ends when you sign out. Sensitive reads and every approval decision are written to the audit log against your name. Two-factor authentication is interface-only in this beta and is not yet enforced. Do not share credentials or export approved records outside the team.

Demo role switcher

Every seeded identity below shares the demo password, which is already filled in. Pick a role to see exactly what that role can and cannot reach — the permission matrix is enforced server-side, so the difference is real and not just hidden navigation.

The AI service identity is listed for completeness but cannot sign in here: it holds no password and authenticates with an X-Agent-Key header, scoped to creating agent reports and nothing else.