▣
Organization-scoped data
Projects, measurements, photos, queues, and permissions are associated with a company workspace. Switching organizations does not mix project data.
Security and data
Company project data needs clear access boundaries.
MeasureTrace is designed around organization isolation, revocable sessions, local-first work, authenticated media access, and explicit offline authorization.
◈
Persistent but revocable sessions
Users stay signed in through server-managed device sessions. A user or administrator can revoke one device, while membership suspension can end access across the organization.
⌁
Private media access
Verified photos are stored outside the public web root and served through authenticated, organization-authorized endpoints rather than public file URLs.
↻
Offline authorization
Company workspaces can remain available offline for a limited authorization period. Expired or revoked access locks the workspace when authorization can no longer be renewed.
✓
File integrity checks
Photo uploads use resumable sessions with size, image-decoding, and SHA-256 verification before the server marks the media available.
◎
Audit-oriented controls
Authentication, invitations, role changes, session revocation, and organization-access events can be recorded for company review.
What administrators control
Remove access without deleting company history.
- Invite, suspend, reinstate, or remove members
- Assign roles and permissions
- Revoke a lost device or all organization sessions
- Set the offline authorization period
- Retain project authorship and audit history after employee removal
Production deployment
Security also depends on how the service is operated.
The public launch requires production HTTPS, restricted database credentials, managed secrets, reliable email delivery, cleanup jobs, monitoring, backups, and external security review.
No exaggerated claims: MeasureTrace should describe the controls it actually uses. The website should not claim end-to-end encryption or other guarantees that are not part of the implemented architecture.