Security

1. Controls in place

• Server-side authorization and permission checks.
• Data separation by organization and traceability of relevant operations.
• Session protection, login attempt lockout and session credential rotation.
• Validation of the declared type and basic content of uploaded files.
• Human approval and audit records for sensitive tasks proposed by AI.

2. Shared responsibility

Security also depends on unique passwords, updated devices and access restricted to authorized people. Credentials must not be shared. Suspicious activity should be reported immediately.

3. Limits and continuous improvement

No system is risk-free. Controls are reviewed as threats, operations and test results evolve. This page does not disclose details that could reduce the effectiveness of protections.

4. Reporting an incident

Suspected unauthorized access, device loss, exposed credentials or security failures should be reported through the official contact channel, including a description and a safe means of reply.