Multimodal RAG Platform · View 10 of 16

Security Architecture

Five trust zones in decreasing exposure, with every boundary crossing labelled — including the attacker's path.

Editable source SVG draw.io All views

Threats drawn, not described

Malicious upload — quarantined and scanned before parsing
Prompt injection inside document text — stripped by the content guard
Retrieved content is treated as data, never as instruction

Controls at each boundary

TLS 1.3 in, mTLS between services, JWKS verification at the gateway
Per-tenant quota and rate limiting at the perimeter
Customer-managed keys and row-level security in the data zone

Tenant isolation

Vector namespace per tenant, enforced in the retriever not the caller
Row-level security on metadata
Every retrieval and every answer written to a write-once audit log