Actions are attributed to the logged-in user via X-Session-Id. All MDM operations are performed on behalf of the user, ensuring a clear audit trail.

A dedicated service account for automated and background tasks. Ensures system continuity even without a user session, with credentials managed securely.

Securely managed API keys (via environment variables) for all external services, including Azure OpenAI and Tavily Search, isolating third-party access.