Data security and responsibility boundaries

Identity and access control

Research, report, media, and administrative functions that require sign-in are protected by server-side authentication and authorization policies.

• check_circle Passwords are verified as salted digests rather than authenticated from plaintext passwords.
• check_circle Administrative, workspace, and business functions enforce server-side authorization checks.
• check_circle Recordings, reports, and export resources are checked by their respective business controllers.

Transport protection

The TrendFirst official site is served over HTTPS. Customers remain responsible for securing their devices, email, credentials, and sharing links.

Research content handling

Questions, responses, transcripts, recordings, video, and reports should be processed only as needed for the customer-directed research workflow.

• check_circle Media access URLs are resolved server-side according to storage type and access identity.
• check_circle AI processing and content retention are jointly constrained by system settings, business authorization, and the selected provider's rules.
• check_circle Customers must not upload personal data, trade secrets, or unlawful content they are not authorized to process.

Monitoring and log redaction

The system records operational, performance, and business-state events for troubleshooting and security audit, while redacting sensitive fields, email addresses, phone numbers, and credential-like text.

• check_circle Browser monitoring does not collect passwords, access tokens, question bodies, response bodies, or report bodies.
• check_circle Session replay, heatmaps, and general click tracking are currently disabled.

Customer responsibilities

The research organization determines the research purpose, participant population, content, retention needs, and member permissions, and is responsible for obtaining required authorization.

• check_circle Use least-necessary permissions for team members and sharing.
• check_circle Complete appropriate reviews before processing sensitive data, children's data, or cross-border data.

Report a security issue

If you suspect unauthorized access, a data incident, or a security defect, contact support@trendfirst.top immediately with the time, affected page, and necessary reproduction details. Do not send passwords or access tokens.