Clear access boundaries.
One network, separate organization workspaces. Public discovery does not grant access to purchasing records or institutional data.
Identity and authorization
Clerk authenticates sessions. The server resolves an active database user using the verified primary email, then checks the persisted role, tenant and record relationship. Navigation visibility is not authorization.
Audit and sharing
Administrators can review their organization’s audit records. External institutional access must be explicitly scoped, expiring and revocable. HotelsVendors does not run credit scoring or make lending decisions.
Operational verification
These controls are not a security certification. Production identity configuration, encryption, backup recovery and institution connections require operational verification.
View your workspace permissions →