Account and security responsibilities

LEGAL_PACKAGE_COMPLETE=YES · EXTERNAL_LEGAL_REVIEW=PENDING

PMGI PROJECT MANAGEMENT SERVICES L.L.C (One Person LLC) · Dubai, UAE · Commercial Licence No. 1471379 · info@pmgi.ae

Version: AITS_LEGAL_PACKAGE_20261002_V9_1_ACCOUNT_SECURITY
Published: 2026-10-02 UTC
Registration CLOSED · PAPER-only demonstration; owner actual observations separate.

Account and security responsibilities

Use a unique password and keep it confidential. Maintain control of the verified email address; never disclose passwords, recovery links, session cookies or API keys to support. Report suspected unauthorized access to info@pmgi.ae. Sign out on shared devices. Do not impersonate another person or bypass tenant controls. The operator protects access through existing controls; this wording does not transfer non-excludable legal duties to users. MFA is not currently available. No account security feature authorizes trading or money movement.

Cookies, communications and security

The application uses the necessary secure HttpOnly SameSite=Lax session cookie for authentication and CSRF. Current application code has no optional marketing/analytics scripts or cookies. Edge providers may set security cookies; service-specific settings and audience requirements need review. No real test email is sent by this mission. TLS, tenant authorization, hashed secrets and expiring sessions are controls, not a security guarantee. Verified operational update, 2026-10-02 UTC: the client application and database use an encrypted LUKS volume. The service refuses to start on the underlying unencrypted path; service restart and locked-volume recovery were tested. Recipient-encrypted off-server backups on the encrypted owner T9 were recovered in memory and checked for integrity. The recovery private key is separate from the server and backup destination. A Mac-side coordinator checks availability and schedules daily verified backups; Mac, network and destination availability remain operational dependencies. A full host reboot has not been tested. Older owner-only rollback copies remain access restricted; this update does not claim that all historical copies were retroactively encrypted. No external-client data has been onboarded. Client retention, deletion/restore reconciliation, provider-account details and onboarding qualification must be completed before registration opens. Security controls do not establish legal compliance or a service-availability guarantee.

Change history and integrity

2026-10-02 · V9.1 · Dated verified encryption and recovery update; no external legal approval or onboarding readiness claimed.
2026-10-02 · V8 · Prior final-review package; retained in immutable release/evidence archive.
2026-10-02 · V9 · Complete owner-authorized publication with granular documents, restrictions, rights-preserving liability/termination/jurisdiction fields, stable links and content fingerprints.

Content SHA-256: 89cf1970271eec5960644d57f135f8ffb3ab74386b1b991b1e9beee63eccb891

Publication does not represent legal or regulatory approval, financial-services authorization or acceptance of new terms. No registration or execution gate is opened.