{% include '@Application/inc/central_header.html.twig' %}
{% include '@HoneybeeWeb/pages/inc/pp_style.html.twig' %}
{# WEB-4 — /security. HONESTY RULE: architecture facts only — things true of the platform
by construction. No certification claims, no compliance badges we don't hold, no vague
"bank-grade" adjectives. The standards map lives on Trust & Governance. #}
{% set p = prices %}
<div class="pp-wrap">
<div class="pp-hero">
<span class="kicker">Security & Data Protection</span>
<h1>Architecture facts, stated plainly.</h1>
<p class="sub">No badges, no adjectives — here is how HoneyBee actually holds and protects
your data, by construction.</p>
</div>
<div class="pp-sec">
<h2>Isolation & access</h2>
<div class="pp-grid c3">
<div class="pp-card"><h3>One database per customer</h3><p>Your company runs in its OWN
dedicated database — not a shared table with a customer-ID column. Tenant isolation
is structural, not a WHERE clause.</p></div>
<div class="pp-card"><h3>Role-based access</h3><p>Every screen and action is gated by
role permissions you control. A user sees what their role allows — including
HiveMind, which inherits the SAME permission model.</p></div>
<div class="pp-card"><h3>Human approval chains</h3><p>Financial documents flow through
configurable approval chains. AI agents draft and chase; they cannot approve, and
money never moves without a person.</p></div>
</div>
</div>
<div class="pp-sec">
<h2>Accountability</h2>
<div class="pp-grid c3">
<div class="pp-card"><h3>Audit trails</h3><p>Documents carry who created, edited and
approved them, and when. Posted financial documents are hash-stamped against
silent alteration.</p></div>
<div class="pp-card"><h3>Your data stays yours</h3><p>Registers, ledgers and computed
reports export to standard formats. Leaving is a download, not a negotiation.</p></div>
<div class="pp-card"><h3>Local control at the edge</h3><p>HoneyCore sites keep control
LOCAL — a site keeps operating and protecting its equipment when the internet
doesn't.</p></div>
</div>
</div>
<div class="pp-sec">
<h2>Operations</h2>
<div class="pp-grid c3">
<div class="pp-card"><h3>Hosting & updates</h3><p>Hosting, updates and backups are
operated by HoneyBee — no customer-side servers to patch.</p></div>
<div class="pp-card"><h3>Data protection</h3><p>GDPR-aligned data handling for EU
customers: your company data is processed to run YOUR system, not resold, not used
to train third-party models.</p></div>
<div class="pp-card"><h3>Standards without overclaiming</h3><p>Our governance posture —
what we align to, what we don't claim —
is documented openly on <a href="{{ url('honeybee_trust') }}"
style="color:var(--n-amber);font-weight:700;">Trust & Governance</a>.</p></div>
</div>
<p class="pp-note">Have a security questionnaire? Send it —
<a href="{{ url('honeybee_contact') }}" style="color:var(--n-amber);font-weight:700;">we answer those directly</a>.</p>
</div>
</div>
{% include '@HoneybeeWeb/footer/central_footer.html.twig' %}