Security
Security practices, without unsupported certification claims.
Workspace isolation
Workspace membership and role checks are the authorization boundary for intelligence, documents, evidence, and billing operations. Service jobs carry an explicit workspace scope.
Evidence and secrets
New evidence objects are private by default and accessed through authorized resolvers or time-limited URLs. Integration secrets use authenticated encryption and are not returned to the browser.
Acquisition safety
URL acquisition validates public HTTP/S destinations, redirect targets, address resolution, response size, and capture limits. Unsupported rendered capture fails closed.
Reporting concerns
Before publication, configure a verified security contact through the operator legal configuration. Do not treat this page as a promise of a certification, audit, or service-level agreement.