Security

Production-style security patterns for a portfolio RAG SaaS demo.

SmartDocs AI demonstrates practical controls for review. It does not claim enterprise security certification or guarantee suitability for regulated production workloads.

Workspace isolation

Documents, chunks, members, settings, credits, and usage logs are scoped to workspace boundaries.

Role-based flows

Guest reviewer access is restricted, while owner workflows support document and workspace management.

Grounded retrieval

Answers are connected to retrieved source chunks and citations so claims can be inspected.

Usage audit trail

AI calls create usage records for success and failure paths to make behavior easier to review.

Honest scope

This is a production-style Enterprise RAG SaaS demo and flagship portfolio project. It shows the architectural decisions and product controls a reviewer can evaluate, without claiming certification or commercial production readiness.

Provider and tracing readiness

DeepSeek/Qwen/OpenAI-compatible model routing and Langfuse tracing are ready when keys are configured. The public demo may use demo-local provider mode for reliability.

Need implementation details?

Reviewer-focused architecture and QA context remains available on the technical review page.

Technical review