Security & privacy
Security model
Account isolation, RBAC, scoped keys and private storage.
Private by default
Documents and artifacts are account-scoped and served through authenticated access or short-lived signed URLs.
Admin
Administrative actions require role checks and auditable events.