Every field has a protection class
P1 — working data visible to the team. P2 — contacts, masked in lists. P3 — documents, masked everywhere. P4 — files in private storage with short-lived links.
- Passport and date of birth are P3: not visible even on the card
- A reveal takes a reason; the entry goes to the log
- A photo is served by a signed link for a few minutes