Security and access
Case files are the most sensitive thing a local holds.
Article9 holds grievance and representation data, some of it about individual members. Access is scoped to the facility by default and every consequential action is written to an audit log the region can read. Nothing about a member's discipline leaves the people entitled to see it.
Roles and what they reach
ENFORCED SERVER-SIDE
- Facility rep
- Own facility only. Creates and works cases, files, uploads, drafts.
- Facility admin
- Own facility, full control including delete, plus rep accounts and facility settings.
- LR team
- The region's docket, sessions, decisions, and the scorecard. Can step into a facility to assist, with the acting facility shown at all times.
- RVP / ARVP
- Regional outcomes and the win-rate scorecard, without case-level editing.
- Admin
- All facilities, user management, facility provisioning, audit log.
How the data is handled.
Where data lives
Site data is stored in a Postgres database tied to the region's Article9 account. Payment details are never stored here. Card and bank information is entered on Stripe's pages and held by Stripe; this site keeps only a subscription's status, plan, and billing period.
Access
The customer area requires a signed-in session, reached by password or by a single-use email link. Passwords are stored only as salted scrypt hashes, never in a form we can read, and repeated failures lock the address. Sessions are carried in signed, httpOnly cookies. Raw IP addresses are never stored; the abuse-prevention limiter keeps only a salted hash.
Encryption
Traffic to and from the site runs over TLS. Data at rest is encrypted by the hosting and database providers.
Backups and retention
The database provider retains point-in-time backups. Demo and quote submissions are kept only as long as needed to respond, then removed.
Who can see member data
Within a region, member data is visible to that region's authorized representatives. Article9 does not sell data and does not use member data for any purpose beyond operating the service for that region.
Separation from the application
The Article9 application and this billing site are separate systems. This site does not read or write application data.
Questions a security review needs answered that are not covered here? Ask us directly.