Data minimisation
Public forms collect only the information required to process a request. Health, disciplinary, religious, personal and emergency data are private by default.
Controlled access
Permissions are enforced on the server and reinforced at database level. Detailed retention rules still require institutional approval.