Security

Boundaries are part of the product.

INSIPS is designed around tenant isolation, private evidence, safe processing, and recoverable decisions.

Deny by default

Identity, role, membership, and resource state are derived on the server before protected actions are allowed.

Files are validated and scanned before extraction. AI candidates are schema-checked and never approve or publish claims.

See the trust workflow for yourself.