Security by design

Company knowledge stays isolated and access-controlled.

Every protected request is checked against server-verified identity, organization membership, role, document ownership, and provider mappings before any company knowledge is searched.

Isolated libraries

Available

One OpenAI vector store per organization, with the ID stored in a browser-denied Firestore location.

Server-verified sessions

Required

Firebase ID tokens are exchanged for secure HTTP-only session cookies and verified on protected routes.

Role enforcement

Available

Permissions are checked in the interface, APIs, Firestore rules, and Storage rules.

No web answers

Required

Employee questions enable only File Search. Unsupported requests are not guessed.

Verified citations

Available

Provider file IDs must match search results, annotations, server mappings, document access, and organization ownership.

Audit history

Configurable

Questions, answers, citations, usage, feedback, and manager review status are retained in Firestore.

App integrity

Configurable

Firebase App Check is wired into the web client. Storage and Firestore enforcement is enabled by operators after monitoring valid production traffic.

Deploy AI answers without giving up control of your company knowledge.

Setup takes only a few minutes. No source is published without your team's approval.

Start a pilot Explore features

Security by design

Company knowledge stays isolated and access-controlled.

Every protected request is checked against server-verified identity, organization membership, role, document ownership, and provider mappings before any company knowledge is searched.

Isolated libraries

Available

One OpenAI vector store per organization, with the ID stored in a browser-denied Firestore location.

Server-verified sessions

Required

Firebase ID tokens are exchanged for secure HTTP-only session cookies and verified on protected routes.

Role enforcement

Available

Permissions are checked in the interface, APIs, Firestore rules, and Storage rules.

No web answers

Required

Employee questions enable only File Search. Unsupported requests are not guessed.

Verified citations

Available

Provider file IDs must match search results, annotations, server mappings, document access, and organization ownership.

Audit history

Configurable

Questions, answers, citations, usage, feedback, and manager review status are retained in Firestore.

App integrity

Configurable

Firebase App Check is wired into the web client. Storage and Firestore enforcement is enabled by operators after monitoring valid production traffic.

Deploy AI answers without giving up control of your company knowledge.

Setup takes only a few minutes. No source is published without your team's approval.

Start a pilot Explore features