Security by design
Effective October 9, 2026
Nation staff access
Nation staff must be pre-authorized. Nation operations require two-factor authentication, role-based permissions, and server-side authorization checks. Reviewer permissions are separated from financial and administrative controls.
Data minimization
Requesters receive the Nation-approved verification result and reference—not a copy of the Tribal roll. Sensitive lookup fields are subject to Nation-configured retention periods and scheduled purge processes.
Auditability and validation
Verification and staff-review activity is recorded in audit history. Completed verification records include an independent validation reference, and Nation-branded verification documents may include a QR code that confirms record status without publishing citizen details.
Private business sharing
Protected documents and presentations can use single-claim invitations, browser-bound sessions, expiration, revocation, no-store response controls, recipient watermarking, and deterrents against printing, saving, copying, dragging, and context-menu use. These controls reduce casual redistribution but cannot prevent operating-system screenshots or external photography.
Infrastructure controls
Tribal Verify uses HTTPS, HSTS, clickjacking protection, restricted browser permissions, private storage for protected assets, server-only privileged credentials, route-level no-store controls, protected search-indexing rules, automated builds, and regression/accessibility testing.
Live Nation connections
Live citizen data remains disabled until the participating Nation approves the connector and the integration is marked ready for live use. The connector should use least-privilege access and return only the narrow response required for verification rather than export a Tribal roll.
Incident response
Tribal Verify maintains internal incident-response, business-continuity, vendor, and data-retention documentation. Nation-specific notice timing, forensic coordination, reconnect approval, and sovereign requirements are addressed in the controlling Nation agreement and security addendum.
Report a security concern
Please do not publish suspected vulnerabilities publicly. Use the Tribal Verify contact form and choose Security concern .
Report a security concern