Enrollment operations and contact messages are protected behind a verified, expiring server-side session.
Leaked links do not grant access. Candidate/PDF links expire, and every private request still requires a live Client Service session bound to the browser and network prefix.
BSS Algeria