Security

• Runs where you choose. On your own machine or, soon, in your own Azure subscription. FnOCarve is not a hosted service: your F&O data does not pass through our systems.
• Read-only towards the source. FnOCarve only exports from and reads the source environment; it writes only to the target environments.
• No stored secrets. Only references to environment variables or Azure Key Vault secrets are kept. In Azure, a managed identity removes secrets altogether.
• Least privilege. The app registration is mapped to an F&O user whose roles you control.
• Traceable. Every export and import is a standard F&O data management job you can inspect in each environment, and every step is logged with a correlation ID.