SECURITY
Your knowledge, governed.
A Company Brain concentrates what your organization knows, so its access model is the product. This page states exactly how content is hosted, who can see what, and what LAN never does.
Where your brain lives
- Each brain is a private, isolated vault in LAN-managed cloud storage. No tenant shares storage paths with another.
- Traffic is encrypted in transit (TLS) everywhere: web, API and MCP.
- Daily snapshots protect content; recovery is operator-assisted.
Who sees what
- Three roles: owner, admin, member. Admins govern structure and access; members work within it.
- Every page carries its own visibility and audience. Departments add a three-state access level: open, read-only, or sensitive (admins only), with delegated department admins.
- Your AI reads through each user's own authenticated session. It sees exactly what that user can see, never more. There is no shared service account.
How content gets in
- Ingestion runs on your side: your AI, connected to your own tools, reads your sources and writes structured pages. LAN receives no raw document uploads and no credentials to your systems.
- Pages index and cite; source files stay in the systems that own them.
- Writes pass conformance and sensitivity gates before landing, and every change records who, when and why.
What we never do
- Train models on your content. Your brain serves your AI clients, nothing else.
- Hold your AI provider tokens. You bring your own clients and your own keys.
- Sell, share or mine your data.
Subprocessors
- Supabase (storage and authentication, on AWS) · Vercel (web hosting) · Railway (platform API) · Resend (transactional email) · dLocal (billing) · PostHog (product analytics).
Paperwork
- Mutual NDA before discovery is standard.
- Data processing agreement available on request.
- Security questions: info@lanbrain.ai.