Security & Privacy
Security by design — stated honestly.
This page describes the security architecture Mananze OS is being built around. Enforcement is in development. We make no certification claims and offer no guarantees until controls are implemented and independently tested.
Security and privacy protections are included in every Mananze OS package. Production activation is subject to final security verification.
Design commitments
No automatic financial access
Financial information is only analysed after explicit consent that is limited to your organization, a stated purpose and a defined scope — and that you can revoke.
Explicit consent
Sensitive access is requested, explained and recorded before it is used. Silence is never treated as consent.
Your business controls access
Authorised representatives decide which people, departments and integrations can see what.
Role-appropriate employee access
Staff see what their role requires. Department views are scoped to the department.
Human approval for sensitive actions
High-risk and payment-related actions require independent human approval. Mananze can propose, not decide.
Tenant isolation
Each organization's data is designed to be separated from every other organization's data.
Auditable events
Significant events are designed to be recorded in a tamper-evident audit ledger.
Reviewable, revocable permissions
Every permission can be reviewed and withdrawn. Withdrawal stops future use under that permission.
System safeguards
Input and connector inspection — Threat containment
Incoming inputs and the outputs of connected tools are designed to be inspected, and suspicious content contained, before it reaches business processes.
Isolated analysis — No execution authority
Scenario and risk analysis is designed to run in isolation. It can inform a decision; it cannot carry one out.
Data classification — Privacy awareness
Sensitive information is designed to be classified so that consent, scope and retention rules can be applied to it.
Audit — Tamper-evident record
Significant events are designed to be recorded in an append-only, tamper-evident ledger so changes to history are detectable.
Current status of this website
- This website is an information site. It has no sign-in, no customer accounts and no connection to Mananze OS business data.
- The Mananze Portal, dashboards and demonstrations are not part of this website. Their addresses return “not found”.
- The only personal information this site collects is what you choose to send through the contact and Early Access forms (when they are open). See the privacy notice.
- The site is served over HTTPS with security headers (including a content security policy and protection against being framed by other sites).
Server enforcement required: Identity, tenant isolation, consent policy, approvals and audit must be enforced by backend services and verified before any real business data is accepted.
Privacy
Mananze OS is designed so that your organisation decides who can see its information, financial information stays locked without explicit consent, and consent can be withdrawn. How this website handles the information you send us is set out in our privacy notice.
To report a security concern, please use the contact form.