Break-Glass Emergency PII Elevation (Invariant I7)
Platform staff hold no standing cross-tenant PII access. Every elevation requires dual approval and is capped at 8 hours.
Statutory Data Protection Safeguards (Act 843 & Invariant I7)
Break-glass grants temporarily unmask tenant telephone numbers and parent identifiers strictly within the bounds of an active support ticket. The approver cannot be the requesting operator (PostgreSQL CHECK constraint: approved_by <> staff_id). Every unmasked record and query during elevation is appended to the immutable WORM audit log.
Approve a Pending Request
There is no shared queue of pending requests yet -- the requester must hand you the request ID directly (e.g. via the support ticket). You cannot approve your own request.
Your own active grants.
| Ticket Ref | Approver | Justification | Remaining Time | Actions |
|---|---|---|---|---|
| No active break-glass elevations for your account. | ||||