Tenant isolation
Business records are organisation-owned and APIs resolve active membership before serving tenant data.
Security and trust
Financial integrity starts with clear boundaries.
Kamela uses organisation-scoped data access, server-authoritative financial operations and private authenticated document delivery. This page describes product design, not a certification or uptime claim.
Server authority
The browser never decides final loan totals, repayment allocation, capital availability or reversal effects.
Durable evidence
Repayments, reversals, capital transactions, schedules and audit events are append-only or explicitly immutable.
Private application
Authenticated workspace routes are marked noindex and excluded from the public sitemap. Robots directives complement authentication; they never replace it.