Security

​

Compliance

​

Data Security

​

Encryption

​

Immutable Storage

• Cannot be deleted during retention period
• Cannot be modified after upload
• Automatic deletion after retention expires
• Full audit trail of all access

​

Tenant Isolation

​

Row-Level Security (RLS)

-- Enforced at database level
SELECT * FROM documents
WHERE tenant_id = current_setting('app.tenant_id')

​

API Key Scoping

• Keys can only access their tenant’s data
• Cross-tenant requests return 404 Not Found (not 403 Forbidden)
• This prevents information leakage about other tenants

​

Authentication

​

API Key Security

​

Best Practices

​

Webhook Security

​

HMAC Signatures

X-DocIntell-Signature: sha256=abc123...

import hmac
import hashlib

def verify_signature(payload, signature, secret):
    expected = "sha256=" + hmac.new(
        secret.encode(), payload, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(signature, expected)

​

Infrastructure Security

​

Google Cloud Platform

• VPC network isolation
• Cloud Armor DDoS protection
• Cloud IAM access controls
• Cloud Audit Logs
• Automatic security patching

​

Container Security

• Non-root container execution
• Vulnerability scanning in CI/CD
• Minimal base images
• No secrets in environment variables

​

Vulnerability Reporting

• Email: security@docintell.com
• We respond within 24 hours
• We do not pursue legal action for good-faith reports

​

Certifications