Trust

Security & privacy

How Relay protects your organisation’s knowledge. Engineer-facing details live in /docs/security/rbac-model.md; this page is the executive summary.

Security pillars

Tenant isolation

CC6.1

Three layers: app filter, Postgres row-level security, post-query assertion. Cannot be disabled at runtime.

Atom visibility

CC6.1

Every atom carries a visibility scope (org / team / restricted / DLP-blocked). Predicate enforced at the SQL level on every query, with a CI guard preventing forgotten joins.

Field-level redaction

C1.1

Per-org policies mask atom fields at serialization. Salary, SSN, PII can be hidden from everyone except a named team or role.

Audit & monitoring

CC7.1

Append-only access log of every read, share, and ACL change. Daily leak-detector job scans for impermissible allows.

Identity provisioning

CC6.6

SCIM 2.0 endpoints for Okta / Azure AD / Google Workspace. OIDC group claims sync at every login.

Legal hold & retention

P1.1

Holds freeze atoms against mutation and TTL pruning. Releasing a hold restores normal lifecycle. eDiscovery export bundles full provenance.

Export DLP

CC6.7

Per-format policies cap export size, gate above a threshold via approval, and watermark every bundle with user + export id.

Sub-processors

Service	Purpose
Postgres	Primary store (atoms, audit, etc.)
Redis	Background job queue + access log buffering
Anthropic	LLM extraction / synthesis
OpenAI	Embeddings (configurable)

Compliance

SOC 2 control mapping at /docs/security/soc2-control-mapping.md. DPIA template at /docs/security/dpia-template.md. Multi-region isolation is on the roadmap; deployment region is currently single-region per environment.