SECURITY & CONTROL

Each league sees its league. Each action has an owner.

OcheControl was designed as multi-tenant software from the start, with scoped administrators and restricted scoring devices rather than one shared admin password.

Tenant isolation

Organisation and league IDs are checked at protected operations so administrators from one customer cannot administer another.

Scoped league admins

A league administrator can be restricted to specific leagues while organisation owners retain broader control.

Restricted tablets

Board-device tokens are hashed at rest, can expire and can be revoked immediately.

Audit trail

Administrative changes, device provisioning, corrections and disputes are attributed to individual users.

Production protections

Secure cookies, email verification, rate limiting, PostgreSQL migrations and production configuration checks are built into v1.

Data portability

Organisation owners can export their competition data and use a deliberate confirmation workflow for deletion.