CONTENT FACTORY
Boundaries you can inspect
The demo does not call tenant or content-mutation APIs, AI, OAuth, publishing, Temporal, or paid providers; it emits only one allowlisted first-party aggregate event and preserves a visible AGPL source link.
Tenant isolation
Authenticated workspace requests are scoped to the active organization. The public demo never reads tenant data.
Encrypted workspace keys
Workspace-provided AI keys are encrypted at rest and are not exposed to the public interface.
Backup and recovery boundary
Backups and recovery are operator responsibilities. Availability and retention depend on the deployment operator.
Deletion and export state
Workspace deletion and data export require an authenticated product flow; the public pages do not perform either action.
Current limits
This page describes product boundaries, not a certification. Verify deployment, retention, and incident practices with your operator.