Infrastructure convenience is not authority.
CLS is designed so cloud, database, hosting, and technical-tenant concepts never become CLS business authority or identity, and so participant information is not centralized into someone else’s system of record.
Core participant functions run locally. Exchange is scoped by explicit authority, purpose, provenance, and minimum necessary disclosure. Security and privacy statements here describe design intent — independent validation evidence is not yet published.
Design intent
CLS is being designed so cloud, database, hosting, and technical tenant concepts do not become CLS business authority or business identity, and so participant information is not centralized into someone else’s system of record.
Principles
Core participant functions are designed to operate locally. Exchange is designed around explicit authority, purpose, scope, provenance, and minimum necessary disclosure. Role, permission, membership, delegation, and authority remain distinct.
Independent validation
Security- and privacy-relevant statements on this website describe design intent. They are not a substitute for independent validation evidence, which is not yet published.