Isolated parsers
Parsers run in a separate worker, one subprocess per document, with resource limits, no network and no database credentials.
Security
Received files are treated as hostile
The controls below are part of the platform's architecture.
Nothing is executed
Macros, scripts and JavaScript inside documents are never executed.
Chain of custody
The original gets SHA-256 and SHA-512 and is kept immutable, with versioning, in S3-compatible object storage (RustFS). Every derivative points back to its source.
Chained audit
Hash-chained audit events per organization, with Ed25519-signed checkpoints kept under object lock.
Isolated organizations
Isolation between organizations with PostgreSQL Row-Level Security, on top of permission checks in the backend.
Credentials and session
Passwords with Argon2id; session in an HttpOnly, Secure, SameSite cookie with CSRF protection; tokens stored only as hashes.
AI under policy
Sending data to external AI providers is disabled by default and depends on organization policy. The model receives only selected passages, no tools, and its answer is validated against a strict schema.
Verifiable reports
Reports with a verifiable manifest, hash and Ed25519 signature.