Skip to main content

Reports

Reports are analytics embedded in the portal: a static site per tenant and role, rebuilt on a schedule, with the data baked in.

  • No personal data can reach a report. Reports read only a reporting schema of ids, statuses and timestamps, never names, emails, health values or tokens.
  • Each site holds one tenant's data and only the report areas the role may read. A role sees reports only with reports.read.
  • Rates and per-person figures are suppressed below 10 people, so a figure can't single anyone out.
  • The portal opens a site with a single-use, short-lived token (createReportsEmbedToken) naming the caller's tenant and role; every request outside that site is refused.

A change to the data shows at the next scheduled rebuild.