Isolation and access control
Account, profile, conversation and document data are separated by the internal company identity. Anonymous sessions cannot use operational APIs or access documents.
Privacy & trust
Company information remains a company asset
Public intelligence is available without an account. Operational tools, documents and the private assistant require authenticated access at the appropriate membership level.
Storage and AI data flow
Profile and operational metadata are stored in the database and files in tenant-scoped object storage. Content is sent to the configured online model only after an explicit analysis action, for that task, and the output requires human review.
Minimization and upload controls
Record only what the service needs. Request size, file count and storage are limited; permitted PDF, Office and image types are checked against their binary signatures before storage or model analysis.
Sensitive and personal data
Before recording specialist personal data, pricing, guarantees or confidential documents, verify authority, consent and contractual restrictions. FANAB does not replace the company's legal and security approval.
Passwords, sessions and caching
Passwords use a salted cryptographic derivation rather than plain text. Sessions use Secure, HttpOnly and SameSite cookies, and account API responses are marked private and no-store.