Built for how enterprises actually operate.
Security architecture built into the platform, not bolted on afterward.
Tenant isolation
Every organization's data lives in its own isolated space, enforced at the database layer — not just hidden behind a UI permission check. A request scoped to one tenant can never see another tenant's projects, documents, or chat history.
Encryption in transit and at rest
Traffic between your browser, PRAGMAS, and its storage layer is encrypted. Documents and extracted knowledge are encrypted at rest.
OAuth 2.0 and hashed credentials
Sign in with Google or GitHub via OAuth 2.0, or with email and password — passwords are hashed, never stored in plain text. OAuth flows are protected against CSRF with a random state token validated on callback.
Human approval on high-stakes actions
Agent workflows that touch anything irreversible pause and wait for a human to approve before continuing. The agent surfaces its plan; it doesn't act unsupervised.
Your data never trains third-party models
Documents and data you upload are used to answer your questions and generate your reports — nothing more. They are never used to train PRAGMAS's or any third party's models.