Security
Security controls are implemented in the platform itself.
Tenant isolation
Every record belongs to an organization and is protected by PostgreSQL Row Level Security, not just UI filtering.
Server-side secrets
AI keys and the service role never reach the browser. Credit balances can only be changed on the server.
Role-based access
Permissions are enforced in the database. Images are stored in a private bucket scoped by organization.
Certifications
FoodVision AI does not currently claim third-party security certifications.