Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting

Open a private GitHub security advisory on KhyFee/DocuSource.

Summary

Grounded answers only; refuse when evidence is weak
LLM opt-in; redacted retrieved chunks only
RLS + private storage for tenant documents
Upload MIME/size allowlists

There aren't any published security advisories