Security by design

Controls that sit inside the product—not only in policy documents.

Citeply uses layered identity, authorization, tenant context, file security, operational monitoring and deletion controls for sensitive questionnaire work.

Create workspace Explore live demo
Fail-closed accessMissing identity, capability or entitlement blocks the operation.
Tenant contextCustomer data access requires explicit consultancy and workspace scope.
Safe file boundaryUploads pass type verification, quarantine and malware scanning.
Citeply trust package with fingerprint and security assurance details
Identity

Secure account lifecycle

Local identity combines email verification, strong password hashing, tracked sessions and required MFA.

  • TOTP and recovery codes
  • Session revocation
  • Sensitive-action step-up
Authorization

Capabilities before routes

Reading evidence, managing connectors, publishing answers and operating the platform are distinct powers.

  • Central capability contracts
  • Owner-only destructive actions
  • Authorization regression tests
Tenant isolation

Explicit scope at every data boundary

Repository calls, object keys and background jobs carry tenant and workspace identity.

  • Context-bound data access
  • Negative two-tenant tests
  • Database-level RLS for Neon runtime
Files

Treat every upload as untrusted

Verify actual content, quarantine new files and block processing until malware scanning passes.

  • Magic-byte validation
  • ClamAV scanning service
  • Size and schema limits
Operations

Observe and recover

Structured logs, correlation IDs, durable alerts and readiness probes support incident detection and response.

  • Authenticated health probes
  • Retry and dead-letter queues
  • Backup restore drills
Data lifecycle

Make deletion a durable workflow

Request, billing settlement, grace period and verified erasure remain explicit and auditable.

  • Immediate access block
  • Provider cancellation checks
  • Deletion ledger and receipt
Continue exploring

Go deeper.

A bounded way to begin

Bring one questionnaire.
Leave with an answer operation.

Apply for a guided 30-day pilot using synthetic or anonymized material. No payment or Microsoft 365 connection is required to begin.

Apply for the pilot Open the synthetic demo
30 daysOne bounded use caseHuman-reviewed outcome