Security
What the platform does today, and what stays your responsibility.
- Templates and captures are encrypted with per-tenant keys held outside the database.
- Tenant isolation is enforced in queries and again by PostgreSQL row-level security.
- Each view of a capture is written to an append-only audit log.
- Staff access needs a platform role and multi-factor authentication.
You are responsible for keeping keys on your server, verifying webhook signatures and protecting your own attendance data. Warka holds no security certification.