Tenant isolation
Workspaces are multi-tenant. Application requests carry tenant context. Customers should not share passwords across shops. Super Admin and shop staff have different roles.
Authentication and roles
Sign-in uses outlet ID, username, and password, with optional MFA where enabled. Role templates limit what a cashier, doctor, accountant, or other role can do. Authenticated application routes are not marketing pages and are marked noindex for search engines.
Healthcare and school records
Clinic, laboratory, and school modules store operational records inside the customer tenant. Public lab-report verify/portal links are tools for a specific report, not a directory of patients. Those routes are noindex.
Incident contact
Security questions: career@sugamflow.com with the subject “Security”.
Official website: SugamFlow
Last updated 6 September 2026