Security Practices & Responsibility

Protect access

• Use only your assigned account and permissions.
• Never share passwords or OTP codes.
• Report lost devices or suspected unauthorized access to the organization administrator.
• Permissions should follow the minimum access needed for the user's work.

Protect data and service

We apply appropriate measures to protect systems, communications, and operational records, and review access and changes as needed. No internet-connected service can guarantee absolute security, so we also rely on monitoring, updates, and incident response.

Report a security issue

If you discover a potential RAKZ security issue, email info@wessaal.com and clearly mark the subject as Security. Do not exploit the issue to access data you are not authorized to see and do not include unnecessary sensitive data in the report.

Product boundary

Location and Wi-Fi verification help establish context for attendance actions, but they do not replace the organization's responsibility for internal policy, device management, permissions, and operational controls.