Security by design
Keep company libraries separate, access tied to verified identities, and answers grounded in approved sources. Clear boundaries at every step.
Access with boundaries
Obi checks who is asking, which organization they belong to, and what they can access. Your approved documents stay at the center of the answer.
Explore the featuresChecks behind an answer
Server-verified identity and organization membership.
Role permissions and document ownership.
Company document mappings and citation checks.
Built-in controls
Understand how access and sources are checked, and which settings depend on your deployment.
Your organization has its own knowledge library. Company boundaries are checked before documents are searched.
One OpenAI vector store per organization, with its ID stored in a browser-denied Firestore location.
Protected routes check your identity on the server, so access does not depend on what the browser says alone.
Firebase ID tokens are exchanged for secure HTTP-only session cookies and verified on protected routes.
Owners, admins, managers, and employees have distinct permissions for the information and actions they can access.
Permissions are checked in the interface, APIs, Firestore rules, and Storage rules.
Employee questions use your approved library. When the sources do not support an answer, the question needs human review.
Employee questions enable only File Search. Unsupported requests are not guessed.
Source references are checked against company ownership and document access before they are included in an answer.
Provider file IDs must match search results, annotations, server mappings, document access, and organization ownership.
Saved questions, answers, feedback, and manager review status give your organization a record to revisit.
Questions, answers, citations, usage, feedback, and manager review status are retained in Firestore. Review retention requirements as part of your deployment configuration.
Configurable protection
Firebase App Check is integrated into the web client. Operators enable Storage and Firestore enforcement after monitoring valid production traffic.
Integration and enforcement are separate steps.
For the people running small businesses
Choose a clearly priced plan that fits your budget, then start with one company document and a real question. See how Obi helps your team.
