We follow least-privilege principles. All production data access is logged, auditable, and tied to business justification. This document explains how we protect your data internally.
We define five access levels to ensure appropriate permissions:
| Level | Who | Access | Logging |
|---|---|---|---|
| L0 - None | Default | No production access | N/A |
| L1 - Logs | On-call engineers | Application logs, metrics | Automatic |
| L2 - Read | Senior engineers (approved) | Database read access | Audit logged |
| L3 - Write | Engineering leads only | Database modifications | Audit + approval |
| L4 - Admin | Leadership only | Full access | Full audit trail |
Elevated access (L2 and above) requires documented justification:
Engineer submits request with business justification (support ticket, incident ID)
Engineering lead reviews and approves within 4 hours
Access granted with automatic expiration time
All actions logged to audit trail with request reference
Every production data access is recorded with:
Audit logs are retained for compliance purposes and are immutable (append-only).
Elevated access is never permanent:
The following are strictly prohibited without documented approval:
Violations result in immediate access revocation and HR involvement.
| Control | Implementation |
|---|---|
| Authentication | SSO with MFA required for production |
| Authorization | Role-based with individual credentials |
| Database access | Individual accounts, no shared credentials |
| API keys | Personal keys, rotated quarterly |
| Impersonation | Admin-only, logged, time-limited |
When employees leave, we immediately:
For questions about our access policies or to report concerns, contact security@brazilnut.ai
Last updated: January 2026