Access Control Policy
1. Purpose
This policy describes how access to AetherCloud's production systems, customer data, and source code is granted, reviewed, and revoked.
2. Principle of least privilege
Access to any production system, database, or secret is granted only for a specific, documented purpose, and scoped to the minimum permissions that purpose requires. Standing broad-admin access is avoided in favor of task-scoped credentials where our tooling supports it.
3. Authentication
- Production infrastructure access requires key-based (not password-based) authentication over an encrypted mesh network.
- Customer-facing authentication (Supabase Auth) supports standard email/password and OAuth flows with session tokens scoped and expired appropriately.
- Secrets and credentials are never committed to source control; they're injected via environment configuration and rotated when there's reason to believe they've been exposed.
4. Authorization
Row-level security policies enforce data isolation at the database layer — a user's access to another user's data is denied by default, not merely hidden by application logic. Team-tier role-based access (owner / admin / member) is planned as part of upcoming team-management features (see our Trust page's control-mapping table) and will be enforced at both the API and database layers when shipped.
5. Review and revocation
Because AetherCloud is operated by a single founder-engineer today (see our Trust page for how we handle the solo-operator structure), access review is continuous rather than a scheduled quarterly process — every credential and access grant that exists is one the operator personally provisioned and can enumerate. As the team grows, this policy will be updated to include periodic formal access reviews and a documented offboarding checklist.
6. Logging
Access to customer vault data is logged in an append-only, cryptographically hash-chained audit trail (Protocol C) that vault owners can view directly via the audit endpoint. See our Trust page for how this maps to SOC 2 criteria.