Name the official source
Working records in Cloqi Doss remain distinct from official records in the customer's external QMS.
Trust Center · dated pre-launch design
Do not promise compliance. Preserve who said what, based on which evidence.
Security is a set of enforced boundaries around customer data, official sources, and operator authority—not a list of adjectives.
Do not overwrite approved records
Corrections create a new version, correction, or supersession trail.
Separate organizations
Organization scope applies across the database, files, workers, and exports.
MFA and current session
Sensitive actions require current authentication and multi-factor checks.
Support access is exceptional
A customer-scoped purpose, action, object, reason, and expiry are required.
Control exit as well as entry
Export, deletion, legal hold, audit tombstones, and backup expiry remain distinct.
Claims we do not make
Design intent is not certification or independent validation.
Cloqi Doss is not presented as an official eQMS, a validated Part 11 system, an ISO-certified product, or a regulator-approved product. MFA, tenant isolation, and other controls are public design commitments whose implemented and independently validated status will be published only with dated evidence.