FAQS
RBAC grants permissions to roles rather than to individuals, and people inherit access from the roles they hold. Roles here compose from groups, document types, metadata values and workspace membership, down to the individual document and field.
RBAC decides from who someone is in the organisation. ABAC decides from attributes of the request - document type, classification, metadata values. TeamSync uses both, so a role sets the baseline and attributes narrow it for sensitive material.
Every permission change is written to the tamper-evident ledger, so 'who had access on this date' is a query rather than a reconstruction. Quarterly access reviews generate from that permission history instead of being compiled by hand.
Backups run continuously as incrementals with a configurable full-snapshot cadence. A single document version restores in seconds and a full workspace in minutes; the specific targets are set per environment during deployment.
Restore rights are themselves a permission, so only roles you grant can perform one, and the restore is written to the same audit ledger as every other action. Restores can also be staged into an isolated environment for a drill that produces evidence without touching production.