Security

Every record belongs to your workspace, and isolation is enforced with row-level security on every table — not just application code. Members of one workspace cannot read another's data, and we verify this continuously with a live isolation test suite.

Accounts support authenticator-app 2FA, and sensitive actions — like removing a factor or changing your password — require re-confirming your password even inside a logged-in session.

Uploaded documents live in private storage with no public URLs. Files are served only through short-lived signed links (about a minute) to authorized members of your workspace, and every download is recorded.

Document extraction proposes fields — nothing is saved to your records until you review and approve it. AI features are also budget-capped per workspace.

Creates, edits, deletions, downloads, sign-ins, and membership changes are written to an append-only audit log your workspace admins can rely on.

Everything runs over HTTPS with a strict content-security policy. Credentials for connected services (like Google) are encrypted at rest with a dedicated key that never leaves the server.