Security and access control.
A public description of the security principles governing protected BLACK& environments, their current evidence boundary and the controls that require system-level verification.
Record status
Owner: BLACK& technology and governance functions. Version: 1.0. Public status: operating position. Last reviewed: 15 July 2026. Next review occurs after a material architecture, provider or access-control change.
Access model
Protected environments require authenticated users and application permissions appropriate to role and confidentiality. Administrative authority, Board access and suspended or revoked states are treated as distinct authorization conditions.
Security lifecycle
Security requirements include account lifecycle controls, least-privilege review, protected secrets, event logging, incident escalation, recovery planning and review of externally hosted dependencies.
Evidence boundary
This public record is not a penetration-test report, SOC report, ISO certificate or guarantee that an incident cannot occur. Control effectiveness must be validated through retained technical evidence and periodic review.
Contact
Report a security concern to hq@blackandi.com with the subject ‘Security — Confidential’. Use the responsible-disclosure procedure before sending sensitive technical material.