Accounts use hashed passwords and email verification. Sessions are server-side, encrypted, and revocable. All protected resources are validated again on every request.
Every conversation, message, and usage record is scoped to its owner in the database. Cross-account access is rejected before any data is returned.
AI provider credentials and the database connection string exist only on the server. They are never shipped to the browser or to any client application.
Request rate limits, daily token budgets, origin checks, and input validation are enforced server-side and cannot be bypassed from the client.