Security

Planner control and Wedding-scoped access.

Altra is designed to keep planner work isolated, couple access scoped to the invited Wedding, and AI-assisted work reviewable before it changes the plan or leaves the workspace.

Access boundaries

Planner routes require authenticated workspace access. Couple portal sessions are membership-scoped and do not grant planner workspace access.

Private files and evidence

File access is authorized at request time. Couple-visible material is explicitly published; planner-private context stays outside the couple projection.

Review-first automation

AI and integration workflows prepare or suggest work. Outbound communication and committed planning changes remain subject to planner review.

Report a concern

Use the Contact page to report a suspected vulnerability or privacy issue. Include reproducible steps and impact, but do not include credentials or unrelated client data.