Profiles and self-service

A person's profile gathers their engagements, compensation, documents, credentials, dependants, agreements, probation, assets and checklists. What loads is decided by who is asking — the parts somebody may not see are excluded from the query rather than hidden in the page.

What people can change about themselves

Self-service covers preferred name, personal email, phone, home address and emergency contact — nothing that is evidence of anything. It acts on the person signed in and takes no identifier, which removes the question of whether they may edit somebody else rather than guarding against it.

Photographs

Avatars are uploaded and served through an authorised redirect, like every other file. Nothing external renders: an avatar hosted on somebody else's CDN would tell that host who is looking at whom, so external URLs are treated as absent and initials are shown instead.