Security

RLC SCO Nexus is built so that access control is enforced by the database itself, not just by the interface. A few specifics:

Account access

Access is by request, reviewed by an administrator before an account is created. New accounts are provisioned through Supabase Auth — passwords are never visible to platform staff, and the interface never sends assessment answers to your browser before you submit them.

Row-level security

Every table carrying account, progress, assessment, or certificate data has row-level security enabled and independently tested — a learner cannot read another learner's records, alter a score, or grant themselves a role, regardless of what the interface does or doesn't show them.

Server-side marking

Competency examinations are marked entirely on the server, re-deriving correctness from the question bank rather than trusting anything submitted by the browser. Certificates are only ever issued by that same server-side process after a genuine pass.

Reporting a concern

Contact your platform administrator if you believe you've found a security issue.