The application uses Laravel session authentication, CSRF protection, request validation, throttled public endpoints, role checks for operational changes and server-side SQL persistence. The public CSV analyzer limits files to 200 KB and 500 event rows, parses event columns in memory, and does not persist the uploaded file. External model calls are optional and depend on server configuration. NVIDIA NIM API credentials are read from server environment configuration and never embedded in browser assets. The current MVP has not been independently audited or certified, and no formal enterprise security certification is claimed. Before production use, configure HTTPS, secure environment secrets, production mail and database settings, backups, access controls, monitoring and a deployment-specific security review. Report suspected vulnerabilities to [email protected].
PROCESSARC · SECURITY
Security overview
for this MVP.
Current safeguards and clear limits for the MVP.
MVP draft · Contact: [email protected]IMPORTANT
This page describes the current MVP only. It is not a contractual privacy policy, security certification or legal advice. Obtain reviewed legal terms before public production launch.