Staff users and public users stay separate
Owners, managers and workers use authenticated staff dashboards. Citizens, customers and residents use public hosted, invite, campaign and QR routes and do not receive staff access.
Data boundary
Pausier Business data boundaries for review.
Pausier Business is decision-support only. It helps organisations pause, check pressure signals, verify through approved routes and record outcomes while keeping public users separate from staff users.
No-sensitive-data rule
Do not enter forbidden credentials.
Pausier does not ask for passwords, OTPs, full card numbers, bank logins, private keys, recovery phrases, provider keys, signing secrets, tokens or cookies.
Public flows collect minimum safe context
Public Protection flows use safe pressure-signal selections, actor type, route labels and handoff references. They should not collect passwords, OTPs, full card numbers, bank logins, private keys or recovery phrases.
External delivery is controlled
Email and webhook handoffs are protected staff actions that require approved Official Route Directory destinations, delivery-event logging and audit logging. Public pages do not automatically send external delivery.
Analytics measure activity
Analytics show checks submitted, handoffs requested, route usage, workflow outcomes, campaign/QR/invite activity and delivery status. They do not show raw sensitive public content or operator notes.
Controlled smoke is not partner proof
Controlled smoke proof shows that approved internal test paths worked. It is not a real partner activation, customer approval, public-sector approval or national rollout.
Review status
The Gate 10 pack documents security and data boundaries for review. Client-specific legal, security, subprocessor, support and production monitoring review remain external gates.