The server resolves organisation and role before reading rows; downloadable export requires step-up MFA.
Governed reporting
Useful reports.
Narrow data boundaries.
APS exposes predefined operational views with explicit columns. Restricted health, Employee Relations, private identity and raw interview material stay outside generic exports.
Choose a report
Only fields listed by the reporting policy appear in the preview.
No export evidence prepared.
Columns come from policy—not browser-selected database fields.
Spreadsheet formula prefixes are neutralised before delivery.
Report, row count, fields, checksum and actor are recorded server-side.
Preview here. Export on the trusted server.
This page does not create a downloadable file. The repository service generates the CSV, computes its SHA-256 checksum and produces one attributable audit transaction. Hosted authentication, persistence and real customer data remain separately gated. Oversized exports fail closed; a separately approved asynchronous server job is required before large exports are supported.