WiBiz Access Control and Identity Summary

Version: v1.0
Published: 6 August 2026
Owner: WiBiz Operations
Classification: Public
Status: Current public summary

1. Purpose

This summary describes the required access-control model for WiBiz corporate systems and client builds. The actual accounts, roles, authentication methods, review records, and provider exceptions are verified per system.

2. Control commitments

WiBiz requires:

named access rather than shared administrator identities wherever the service supports it;
least-privilege and role-based permissions appropriate to a person's work;
approval before access is granted or materially changed;
strong authentication and multi-factor authentication where supported;
controlled service accounts, application credentials, secrets, and emergency access;
separation of production and non-production access where the architecture supports it;
prompt removal or adjustment of access after offboarding or role change;
periodic review of privileged and general access;
logging and review of sensitive administrative activity where supported.

3. Evidence boundary

An access claim requires a current account inventory, approval record, role or permission evidence, authentication evidence, review record, and exception status. A policy statement alone does not establish that a provider enforced a setting.

Where a service cannot support a required control, the limitation must be recorded with a risk decision, compensating control, owner, and expiry. WiBiz does not describe such a system as fully compliant with the required control.

4. Client-build application

The Build Security and Data Annex identifies:

client, WiBiz, provider, and service-account roles;
privileged access and support-access paths;
single sign-on, multi-factor authentication, and session controls;
tenant and client isolation;
approvals, review cadence, logging, and emergency access;
customer responsibilities and accepted exceptions.

5. Contact

Security enquiries: security@wibiz.ai

WiBiz Access Control and Identity Summary v1.0, 6 August 2026.