Security model
A public case reference alone does not open the case. A separate private code is required and can be revoked or regenerated. Repeated failed attempts may be rate-limited and logged.
Recipients should not send banking passwords, unrelated identity documents or sensitive material that is not necessary to answer the matter.


