Security
Security boundaries are part of the beta.
A description of the current architecture under evaluation, not a certification or a finished assurance report.
How it's actually built
Four things, verified in the codebase, not asserted in a copy deck.
Follow a document and a question through the system. Select each step to see what happens there.
PII redaction before indexing
Documents pass through a redaction step before they're indexed, including recognizers built for regional identifiers, Tanzanian phone numbers, NIDA national ID format, and TIN numbers, not just generic patterns.
What's not here yet
No compliance certification (SOC 2, ISO 27001, or similar) is claimed, none has been pursued yet. The architecture described above still requires beta validation, security testing, and formal review before broader use. If you need a security assessment for an evaluation, talk to the team directly rather than relying on this page alone.