Security and trust
Autonomy is delegated, bounded and auditable. These are structural properties of the platform, not settings.
Tenant isolation
Every workspace is its own isolation boundary, enforced by application authorization and PostgreSQL row-level security. Cross-workspace queries return nothing, even when a query forgets a filter.
Governed agents
Agents have their own identities and permissions. Every external side effect is an action record that passes deterministic policy evaluation and, where required, human approval.
Append-only audit
Who acted, on whose behalf, why, with which evidence and which approval — recorded in the same transaction as the change and visible to your administrators.
No standing operator access
Platform staff have no default access to your content. Support access is explicit, scoped, time-bound and audited.
Identity
Single sign-on, multi-factor authentication and passkeys through a dedicated identity provider. Tokens never reach browser JavaScript.
Untrusted content stays data
Imported documents, messages and web pages can never change policy, permissions or tool access.