Security & Compliance

Enterprise Data Privacy & Security Architecture

BetterBee is built with strict privacy controls, isolated storage, and verifiable provenance at every tier of the stack.

Zero Model Training

Your uploaded documents, indexed vector embeddings, and conversation histories are strictly your property. BetterBee never contributes customer data to public AI training datasets or third-party corpuses.

Tenant-Isolated Vector Collections

Embeddings in ChromaDB are segregated by workspace identifiers. Vector similarity queries are restricted to the selected workspace boundary, mathematically preventing cross-tenant information bleed.

Private AWS S3 Storage & Encryption

Uploaded files reside directly in your private AWS S3 bucket. All transfers utilize TLS 1.3 in transit and AWS SSE-S3 256-bit encryption at rest. Pre-signed upload URLs expire within 60 minutes.

Clerk JWT Authentication & JWKS Caching

Every API request is authenticated via JSON Web Tokens (JWT) verified against Clerk's cryptographically signed public keys. Fast local JWKS caching ensures zero verification network bottlenecks.

Infrastructure & Security Specifications

Data at RestAWS S3 AES-256 server-side encryption & PostgreSQL encryption

Data in TransitEnforced TLS 1.3 for all REST endpoints, SSE streams, and S3 direct uploads

Authentication LayerClerk OAuth / SSO with JWT session tokens and short-lived JWKS signatures

Vector Storage IsolationChromaDB collection per-workspace partitioning with strict foreign-key verification

Host and govern your documents with confidence

Experience private document intelligence with full data sovereignty.

Open Workspaces