Approved Baseline
Protect Cloudberrie credentials, access, and recovery information.
This handbook defines the current startup-stage security controls and the conditions that trigger migration to business-grade access management.
Apple PasswordsApproved for 2026
UTCInfrastructure time standard
AnnualFormal review cycle
Security Standards
Credentials
SEC-001 Credential Management
Approved vault, naming, recovery-code storage, and migration trigger.
2026 Current State
| Control | Cloudberrie Standard | Status |
|---|---|---|
| Password manager | Apple Passwords | Approved |
| Shared password documents | Prohibited | Enforced |
| Cloudflare MFA | Enabled, backup codes stored in Apple Passwords | Implemented |
| Infrastructure timezone | UTC | Approved |
| Business password manager review | January 2027, or earlier when trigger conditions occur | Scheduled |