Trust
Security is not a marketing page. It is architecture.
Voti was designed from day one for sensitive company knowledge. This is exactly what it protects, and how.
What a single question goes through
- Who is askingVerified identity, with two steps if the company requires them.
- From which companyThe database rejects any query that crosses the boundary.
- What they may seePermissions per document and person. Denial wins.
- What gets answeredOnly what was retrieved from the documents, citing which one and which page.
- What stays writtenThe access, granted or denied, in the audit log.
Employee handbook· p.3
Every company, isolated at database level
A query from another company returns nothing: not because a filter discards it, but because the database refuses. Every piece of data carries its organisation’s stamp, and no application bug can walk past that. Technically: Row Level Security in PostgreSQL, forced for the system itself too.
Potens does not invent. By design.
If the answer is not in the documents, there is no answer — and every one that does arrive comes with the document and the page beside it. The refusal reads “I do not have that information”, and that question moves to the pending-knowledge list. Provenance is checked against the original, not against the model’s word.
Permissions the AI obeys
Per-document permissions are not just an interface thing: they govern what Potens may read in order to answer each person. Denied means denied — no summary, no citation, no mention. Every access and every denial land in the audit log.
Privacy inside the team itself
Chat histories are private per person — not even the administrator can read them. Unanswered questions are stored with no author: the table has no column for who asked, so anonymity does not depend on goodwill.
Two steps to get in, if the company decides so
Each person can protect their account with two-step verification (authenticator app, no SMS). An administrator can require it across the team: anyone without it set up does not get in. Signing in with a Google account works too.
GDPR applied: the data, portable and erasable
From Settings, all of an organisation’s data exports to a single file, or the whole account — data, documents and files — is deleted irreversibly. No support tickets, no waiting.
Where the data lives
Infrastructure in the European Union (Frankfurt, Germany): database, files and compute in the same city. Queries are processed by a language model over an API, with processing in the United States under the European Commission standard contractual clauses; client documents are never used to train models.
- Database and files
- European Union · eu-central-1
- Compute
- Frankfurt, Germany
- Language model
- External API · United States
Client documents are never used to train models.
What is not there yet
No SOC 2 or ISO 27001 certification yet: it is a young product and no badges are faked here. What there is from day one is verifiable architecture and access auditing — denials included.
Responsible disclosure: seguridad@voti-intelligence.com
Security is checked, not promised.
Test it with your own documents and your own permissions for seven days. If your company needs specific guarantees, write to us before you start.