Synthetic today. Customer readiness comes next.
Authentication
NanoCorp sign-in is wired for payment preparation. Customer workspace membership and access tests must precede real data.
Private storage
No customer record storage operates in the demo. Validate encrypted private storage, signed access and sensitive-record handling.
Workspace isolation
Demo state exists only in each mounted browser tab. Validate server-side tenant authorisation on every real record route.
Backups
Nothing is persisted by this demo. Define encrypted backups, recovery objectives and tested restore before launch.
Retention
Reload clears demo edits; downloaded files remain on the user device. Approve real-record retention terms and enforcement.
Deletion
Demo reset clears in-memory state only. Verify real storage, database and backup deletion workflows with appropriate retention exceptions.
Professional review
Demo reviewer identity and conclusions are fictional inputs. Appoint responsible operators, validate competence and require authorised professional review.
POPIA and access
Review lawful processing, consent or other basis, operator agreements, residency, access logging and incident response with qualified advisers.
Payment gate
Public subscriptions remain hard-closed in server code. Owner-only Sandbox preview is not paid product access.
Real-file ingestion
All supported methods at /api/uploads return 503. Fixture import uses fixed public synthetic data and sends no files.