Everything we'd want to read before signing.

How the Organization model bounds every query, and why row-level security on Postgres is our defence-in-depth layer.

SHA-256 hash chain across every audit row. Verifiable from the UI or via API. Why we don't trust insert-ordering alone.

Per-user OAuth, signed-state CSRF, plaintext tokens in DB (with rationale). Why we accept that trade-off.

Why we generate an outline (BriefPlan) before rendering slides. Latency, correctness, and steerability gains.

What we collect, why, where it lives, how long we keep it. Plain language, no legalese theatre.

Standard EU SCCs included. We sign before any enterprise rollout — no extra paperwork required.

Encryption at rest, in transit, hashing strategy, secret rotation, incident response runbook.

Every third party that ever touches a byte of your data — Anthropic, OpenAI, Stripe, our infra provider.

Every endpoint, schema, and example response — generated from the FastAPI app so it never drifts.

From signup to your first ingested meeting in 5 minutes. Covers API keys, webhooks, and the chat agent.

Standard renamed back to Starter. Added Max tier. Per-tier quotas now SA-editable from the Billing page.

Customers can upload .pptx templates via UI with a monthly upload counter that doesn't reset on delete.

Cross-org defaults + per-org overrides for what each role can do — editable from the SA console.

A short essay on why governance reports stay manual, and what we learned trying to automate them.

How we chain audit rows with SHA-256, why we don't trust auto-increment, and the verifier API.