Security

Account and access controls

• Customer portal access requires authentication.
• Administrative views are restricted to accounts with admin privileges.
• Destructive account and project actions require explicit confirmation in the portal.

Processing controls

• Validation, analysis, payment, processing, audit, and download workflows are separated to make customer spend and processing state visible.
• Provider spend, payment state, job state, artifacts, and audit outputs are recorded for traceability.
• Local post-processing steps such as finalize and compose are designed not to call LLM providers or spend provider budget.

Data handling

Uploaded sources, generated vaults, manifests, and artifacts are handled as customer project data. Payment card collection is handled by the payment provider. All2WIKI stores billing status and provider references needed to operate the workflow.

Report a security issue

To report a vulnerability or security concern, contact support@essentialai.uk. Include affected URLs, reproduction steps, impact, and any relevant logs or screenshots.