Information Security Policy – ATHAR Platform

Access to platform data requires signing in with a valid account. Permissions are restricted by each account's role, and administrative areas are limited to authorized accounts only. A user's identity and permissions are verified before any data is shown or any action is performed.

Each user's data (their profile, achievements, narrative, and evidence) is kept tied to their own account, and one user cannot view another user's data.

Passwords are never stored in their original form and are protected using secure hashing techniques. Controls are applied to limit unauthorized sign-in attempts, and any account can be suspended when needed. We recommend that users keep their passwords confidential and never share them.

Files and attachments are stored privately and are made available only to their owner after identity verification. Controls apply to accepted file types and sizes to limit the upload of inappropriate content.

The platform keeps logs of specific sensitive operations for security and internal accountability, accessible only to authorized administrators. These logs do not include passwords.

Credentials and keys used to operate the platform are kept in the server environment only, and are never shown to users or sent to the browser.

External AI services are used to help draft narrative text. What is sent to them is limited to the text needed for this purpose, and passwords and attached files are not sent. Drafts remain reviewable and editable by the user, who is responsible for approving the final content.

The platform includes mechanisms for data backup and recovery, which continue to be developed as part of the platform’s operational readiness requirements.

We encourage users to report any security concern or suspicion through the in-platform "Support" page, and reports are reviewed by the responsible team.

Security controls are reviewed and updated when needed, and this policy may change as the platform evolves. The last-updated date appears at the top of this page.