Tenant isolation
Private memory reads and writes execute through tenant-scoped PostgreSQL services with forced row-level security.
TRUST & GOVERNANCE
Authorization stays separate from project context.
PostgreSQL row-level security, scoped credentials and explicit repository resolution work together so context selection cannot widen access.
Revocable access
API keys are stored as hashes, can be restricted or revoked, and cannot grant themselves additional authority.
Audited forgetting
Forgetting scrubs stored content and vectors while retaining deletion evidence and audit integrity.
Support privacy
Support requests and contact details are stored privately for the customer and authorized platform staff. Only feedback with explicit author consent and administrator approval can appear publicly; contact details and private notes are excluded.
When email delivery is enabled, Resend processes notification emails and requested replies. Team notifications link to authorized administration rather than copying the private submission. Redacting a request clears its live stored content and pending email payloads while retaining fingerprint evidence. It cannot recall email already accepted by the provider or erase protected backup copies outside their retention lifecycle.