Biztonsagos MI architektura
EUCRAB is designed for institutional workloads: EU-hosted infrastructure, encrypted transport, audited access, and separation between customer data and model providers.
Data handling
Workspace content is stored in PostgreSQL with least-privilege application credentials. Secrets are injected via environment variables — never committed to source control. Backups follow your operator's retention policy.
AI processing
When an external model API is enabled, prompts are scoped to compliance assistance. You should configure regional endpoints and data processing agreements consistent with your DPA obligations. Rule-based fallbacks operate without third-party inference when keys are absent.
Human oversight
High-impact outputs are framed as drafts. Administrators and investigators retain explicit controls for whistleblower and DSAR workflows, including immutable audit logs for privileged actions.