Security
Controls we actually implement
This page describes product behaviour, not a certification. Independent audits and SOC reports are not claimed here.
Controls
What the platform enforces
Security is not a marketing layer on top of search — it is how queries are planned.
Private object storage
Files never sit behind a public URL. Downloads use short-lived signed links. The local adapter uses HMAC tokens with the same contract as S3.
RBAC at two levels
Organisation roles (owner, admin, editor, viewer) plus optional workspace roles. Restricted documents need an explicit grant.
Session cookies, not tokens in JS
Access and refresh tokens are HttpOnly. The SPA never sees them, so an XSS payload cannot exfiltrate a bearer token from memory.
Argon2id passwords
Password hashing uses Argon2id. Verification and reset tokens are hashed at rest. Sessions can be revoked per device or everywhere.
Prompt isolation
User questions are treated as untrusted text. Retrieval is authorised first. Generation is instructed to answer only from supplied passages.
Soft delete and retention
Documents are soft-deleted so historic citations can say “source removed” instead of dangling. Retention is configurable per organisation.
Questions about a specific control? Contact security.
Security
Access control is the feature
For a document AI product, isolation is not a checkbox at the bottom of the page — it is the thing that makes the product usable at all.
Read the security overviewAuthorisation before retrieval
The authorised document set is computed first and applied as a SQL predicate, not filtered out afterwards.
Private object storage
Originals live in a private bucket. Downloads use short-lived signed URLs that are re-authorised on every request.
Row-level security
PostgreSQL RLS policies enforce tenant isolation independently of application query construction.
Sessions and rate limits
Rotating refresh-token families in httpOnly cookies, with per-route rate limits on auth, upload and chat.
Put your documents to work
Start a free trial, upload a handful of documents and ask the question you have been asking colleagues all week.
No payment details required for the trial.