Identity & access
Private workspaces use Sign in with ChatGPT and server-enforced role checks. Users operate only in the workspace assigned to their active organisation role.
Open workflow →Sprint Wholesale combines identity, tenant boundaries, protected records and evidence-led release governance. This page describes implemented operating controls; it does not claim external certification.
Private workspaces use Sign in with ChatGPT and server-enforced role checks. Users operate only in the workspace assigned to their active organisation role.
Open workflow →Buyer, supplier and partner records are queried against organisation ownership so commercial activity is not exposed across tenants.
Open workflow →Structured operations are stored in D1; authorised private files are separated in R2 and retrieved through controlled application routes.
Open workflow →Attributed audit events, readiness controls, UAT cases, findings, incidents and formal go-live gates create an evidence trail for release decisions.
Open workflow →Public forms must not receive passwords, payment-card data, banking credentials or confidential documents. Private uploads require an authenticated workspace.
Open workflow →Health checks, incident records, recovery controls and release blockers support responsible production operation. Manual controls remain explicitly incomplete until evidence is recorded.
Open workflow →