Operational pattern
Core workflow rows
| Subject | Status | Control |
|---|---|---|
| Employment certificate | available | metadata only |
| Medical certificate | future | protected |
| Expiry | tracked | report-ready |
HR-R2 Documents
Documents and certificates baseline
Document/certificate metadata is visible by scope; raw attachments and special-protected files stay out of evidence and public UI.
API endpointMetadata baseline/people/v1/documents/certificates?companyId=company-alpha
Postgres-backed API
Sensitive-field handling
No raw leakageHR-R2 screens and evidence avoid national ID, raw salary detail, health data, geolocation, photo, signature, device fingerprint, raw attachment, and receipt blob values.