Security & governance
Built to hold up to review.
Agricultural records decide who receives inputs, subsidies and support. The platform is designed so that decisions are attributable and auditable — in the office and in the field.
Platform controls
Eight controls, in four groups.
Access
Role-based workspaces
Field, district, county, national and administrative users each work in a workspace designed for their role.
Row-level security in the database
Access rules are defined in the database itself, so they apply however the data is requested.
Integrity
Approval chains
Records move through verification and approval at the institution's own administrative levels before they count.
Append-only decision ledger
Approvals, rejections, correction requests and escalations are recorded with who and when, and are not edited afterwards.
Field
Offline capture queue
Work captured without coverage is queued on the device and submitted when the connection returns.
Visible sync status
Field officers can see what is still waiting to sync.
Web transport
Encrypted connections
The platform is served only over HTTPS with strict transport security.
Browser protections
A content security policy and frame protection limit what pages can load and where they can be embedded.
Governance
Commitments that shape the work.
- Data ownership
- The operational record belongs to the institution. Hosting and operating arrangements are agreed in each engagement.
- Boundaries
- Plot boundaries are operational outlines for traceability — approximate, not cadastral survey.
- Published figures
- We do not publish programme figures until they have been validated against criteria agreed with partners.
- Identity separation
- AgriVault is an independent company. Government and partner marks appear only in labelled programme context.
Reporting a security concern
If you believe you have found a vulnerability, write to partnerships@agrivaultdata.com with the subject “Security report”. Please do not access data that is not yours or disrupt the service while investigating.
Bring your security and audit questions.
We will take your team through access, approvals, the decision ledger and offline behaviour.