Security

Document-level security. Source permissions enforced on every query.

EigenSearch enforces the source system's access rules. A user only ever retrieves passages from documents they are allowed to read.

Document-level security

  • Connectors sync each document's ACL (users and groups) alongside its content.
  • Identity is resolved per request via your IdP (Entra ID / Azure AD).
  • Permission filters are applied in the retrieval query, not after. Restricted documents never reach the ranker or the model.

Deployment

  • Self-hosted: runs entirely in your infrastructure. Documents, embeddings, and indexes stay in your Postgres.
  • No training on your data: content is used for retrieval only.
  • Auditable: every answer records which passages it cited.