Skip to content
Commercial Blue — Facilities and Operations

Security

Security & Responsible Disclosure

Commercial Blue. treats operational data as sensitive. Access is granted by role and assignment, and privileged actions are logged.

Platform controls

Role-based access control, row-level data restrictions, server-side authorization, private file storage with time-limited links, upload validation, session management and audit logging.

Planned controls

Multi-factor authentication support is planned. No feature is represented as available until it ships.

Compliance statements

Commercial Blue. does not claim FedRAMP, CMMC, FISMA, NIST or other government authorization. Any such status will be published only after the applicable independent process is completed.

Reporting a vulnerability

Report suspected vulnerabilities through the contact form with the subject 'Security'. Please avoid testing that could disrupt operations or expose third-party data.