An assistant that can read every document in the company must be at least as careful about access as the systems it reads from. MOST Insight was designed from the first line of code around that principle.
Access control lists from Entra ID, Google Workspace, Dropbox, Box and NTFS are stored with every indexed passage. Queries are pre-filtered by the caller’s resolved group membership, so a document a user cannot open can never influence their answer.
OpenID Connect sign-in with Microsoft Entra ID or Google Workspace, PKCE, HttpOnly secure cookies and session hardening. A fail-closed mode refuses any query without a resolved principal set.
TLS 1.2+ for every connection (automatic certificates), encrypted storage volumes, and secrets managed outside container images — encrypted at rest with SOPS and verified at start-up.
The question store pseudonymises users with rotating, irreversible identifiers derived from three independent secrets. Administrators see trends, never individuals.
Multi-tenant cloud, single-tenant private cloud, or fully on-premise with local GPU inference. In on-premise mode no document or question leaves your network.
Access rights are refreshed every 12 hours by default and on demand. Revoked access disappears from answers automatically; deleted files are purged from the index on the next sync.
Hosted models run under enterprise terms with no training on customer data and zero retention. Business and Enterprise customers can bring their own endpoint.
Health checks, automatic restarts, Prometheus metrics and alerting on every service. 99.9 % uptime SLA on the Business plan and above.
We operate to recognised frameworks and support our customers’ own audits.
Data-processing agreement available, EU hosting on request, right-to-erasure handled by purging indexed content on deletion.
Change management, access reviews, logging and incident response procedures aligned with SOC 2 Trust Services Criteria.
Architecture documentation, penetration-test summaries and security questionnaires provided to Business and Enterprise customers.
Send it to our team and we will complete it with your procurement process.