Least privilege
Operational access should be limited to people and systems that need it to perform requested work.
Security
Trust requires operational discipline.
Charta treats private requests, personal context, and partner information as sensitive operational data.
Context minimization
Charta collects the context needed to review, coordinate, or deliver a request without asking for unnecessary exposure.
Responsible disclosure
Security concerns can be reported to security@charta.me.