Tenant isolation
Reports, evidence assets, drafts, feedback, billing records, and audit events are scoped to authorized workspace access.
Trust boundaries before automation.
This page summarizes implemented product boundaries. Final security wording remains subject to security review.
Security review required before release
PII before AI and billing
Sensitive inputs are checked before high-cost AI processing or billing actions where the production contract requires it.
AI output boundary
AI-generated drafts and recommendations require evidence checks, risk controls, and human review before external use.
Evidence traceability
Claims, diagnostics, recommendations, and unknown values preserve source, state, limits, and review status where supported by the workflow.