Admin data, Hermes receipts, clinic candidates, and platform controls sit behind a signed, expiring session.
The access code is exchanged once. It is not stored in browser storage or exposed to client JavaScript after sign-in.