Only the client’s own users, listed in the application’s user management screens, can log in to the client’s environment.

datascalehr or Mendix staff can access raw data only at the data owner’s explicit written request, under strict administrative control, recorded through the in-app data access request function.

Back-end access is limited to three named engineers, requires client permission, and is logged for the life of the environment.