Full platform access · every action here is logged and cannot be erasedChanges are audit logged

Platform settings

Tenant identity, locale, session rules and security policy.

Tenant

One tenant in the pilot - the model supports more

Locale & units

Applies to the app, receipts and every console

Kiswahili is listed but not yet translated - turning it on would ship English strings to customers. Leave it off until the copy is reviewed.

Session rules

Applied to every charging session

minutes
minutes
LKR
seconds
seconds
seconds
Show connectors as Unknown once status is stale

Never display a stale connector as Available - the spec is explicit about this.

Allow guest browsing without an account
Auto-stop session at max duration

Security

Authentication and access policy

Require MFA for all staff accounts

Currently off - 2 field engineer accounts have no MFA.

Require MFA for super adminlocked

Cannot be disabled.

Enforce 3-D Secure on all card payments
IP allowlist for admin consoles

Not practical for field engineers on mobile data.

Auto-logout idle console sessions
minutes
minutes

Data retention

What we keep, and for how long

years
years
days
years
Retention is not deletion. When a customer asks to be erased, personal details are removed but financial records tied to issued receipts are retained for the statutory period with the customer reference anonymised. Shortening these values does not retroactively delete anything already held.