Verify before you trust.
Every claim on this page reflects the product's real architecture. Your engineering team can request deeper technical documentation or talk to us directly at any time.
Each claim, with somewhere to check it
Every card describes something real in the product's architecture. Your engineering team can ask for the documentation, check how it is implemented, and talk to us directly about any claim.
User identity is derived from your authenticated session, never from the request body.
Every mutating route authenticates via Authorization: Bearer JWT. The body's actorContext field is silently ignored.
Permissions are looked up from the role server-side, not from a client-supplied permissions array.
hasPermission reads directly from the canonical role-to-permission map. A client-supplied permissions array on the context is inert.
Every mutation produces an audit-log row, queryable by tenant, time, and action.
A composite index keeps time-range queries fast without scanning the whole table, even when the audit log reaches millions of rows per tenant.
Detected PII is replaced with [REDACTED:<kind>] before the excerpt is persisted.
Redact first, then truncate to 160 chars. Email, phone, identifier, and sensitive-keyword detectors all run unconditionally. The replacement token is non-invertible.
Copilot refuses to answer if no approved source supports the question.
No source means no answer, so the user receives a typed refusal that names the exact gap to fill instead of a fabrication that only sounds confident.
Demo mode lets you evaluate the product without sharing real data.
Runs with a deterministic fixture. No live database calls, no paid-provider calls, no customer data persisted during evaluation.
The AI provider boundary follows the OpenAI standard, so you can bring your own model.
No vendor lock-in. Point the adapter at OpenAI, Azure OpenAI, Anthropic, vLLM, or any OpenAI-compatible /v1 endpoint.
What questions remain?
Need deeper technical docs, a security overview, or a session with the AI Global Hub team?