Your data under control. Every step traceable.
Who sees what is decided by roles and assigned access. Key decisions and process steps are written to records that cannot be quietly rewritten.
Everyone sees only what they need.
Superadmin, admin, team member and client have clearly separated permissions. By default, documents are accessible only to those they were assigned to, and clients see only their own projects.
Roles and permissions
Admin, member and client. Elevated permissions can only be changed by a superadmin.
Need-to-know documents
A new document is restricted - access is granted to specific people.
Separated client
Clients see their projects and comment on their documents. They have no view into internal work.
Once it's written, it can't be rewritten.
Approvals and Process control write every step into a chain where each record carries the fingerprint of the previous one. Any later change breaks the chain and the system shows it.
Chain of records
A SHA-256 fingerprint of every record, with integrity verification right in the detail view.
Audit-ready records
Steps, evidence, deviations and actions together for the auditor.
Trash with restore
Deleted items can be restored, nothing disappears by mistake.
Proof that doesn't depend on us.
As an extension in development, notarization writes fingerprints of important records - attendance, approvals, process steps or documents - to a public blockchain. Anyone can then verify authenticity, without access to MACAY and without having to trust us.
Tamper-proof
A recorded fingerprint cannot be changed or deleted.
Transparent
Verification is public and independent of MACAY.
No personal data
Only the hash goes on the blockchain - the content stays with you.
Secure login without compromise.
Passwords are stored only as Argon2id hashes. The session runs in a secure cookie that browser scripts cannot access, and login attempts are rate-limited.
Passwords in Argon2id
Passwords are never stored in readable form.
Protected session
Login in an httpOnly cookie, transfer over HTTPS only.
Attempt limits
After several failed attempts, login is temporarily blocked.
Files in private storage in the EU.
Documents and attachments are kept in private storage in the Frankfurt region. To download, a user only gets a temporary signed link, never a public file address.
Private storage
No file is publicly available at a permanent address.
Temporary links
Download links expire on their own after a short time.
Large files too
Videos and materials up to 300 MB go straight to storage.
We're happy to answer all your questions.
If you can't find what you're looking for, write to us. We'll answer specifically for your company and show it right in the system.
In private storage in the Frankfurt region in the EU. For custom deployments, we can agree on a different location.
Not quietly. Records form a chain with SHA-256 fingerprints - any later change breaks the chain and shows up in the detail view.
No. Clients see only their own projects and what you share with them. Internal tasks and comments stay within the team.
Need security documentation?
We'll prepare answers to your security questionnaire and show you how access is set up on your process.