Role-based access
Permissions should be evaluated server-side for every sensitive action.
Auditability
Important changes, approvals, exports, and administrative actions can be logged.
Local control
Core data can remain on the barangay installation instead of depending on continuous cloud access.
Protected sessions
Secure sessions, password hashing, throttling, and re-authentication should protect account access.
Controlled files
Sensitive uploads and documents should not be exposed through predictable public URLs.
Backup resilience
Authorized backups and data export should remain available even if a software license expires.
Production note: Offline operation reduces some internet exposure but does not eliminate threats from weak passwords, malware, unauthorized physical access, insecure backups, insider misuse, or local-network attacks.