Privacy & Tenant Isolation

Tenant data privacy is a foundational engineering constraint of the OrviQ Assistant.

---

Isolation Invariants

1. Session-Derived Identity: The Assistant never trusts tenant or user parameters sent by the client. It derives identity strictly from the authenticated server session.
2. Zero Cross-Tenant Leakage: Database queries for tenant records (controls, risks, policies, evidence) automatically apply tenant filtering at the ORM layer.
3. No Model Training: Customer tenant data is never used to train or fine-tune public foundation models.
4. Separate Vector Indices: Tenant evidence vectors are strictly partitioned by tenant ID; global product documentation vectors are completely segregated from customer tenant datasets.