Security
A summary of security controls active today and the compliance commitments we're building toward.
Today
Workspace isolation
Every workspace is isolated via row-level security.
Private Corpus
Organization content is only accessible to organization members.
Encryption
TLS in transit; encryption at rest on managed database.
Authentication
Email, OAuth (Google), and token-based invites with expiry.
API security
CLI tokens with narrow scope, revocable at any time.
Audit logs
Enterprise actions are logged for traceability.
Compliance roadmap
Coming soon
SOC 2
Planned.
Coming soon
GDPR
Export & delete controls ready; certification to follow.
Coming soon
Private Cloud
Isolated deployment for Enterprise.