Tenant settings

Preview data

Configure tenant identity, retrieval policy and retention from one role-controlled administration area. Production changes require explicit review.

Answer guardrails

These controls are enforced before and after the model call; prompt text cannot bypass them.

Minimum retrieval scoreTop evidence must meet or exceed this threshold.Minimum evidence chunksDistinct supporting chunks required before generation.Maximum selected chunksBounded evidence sent to the model and verifier.Required claim coverageSubstantive claims that must have verified citations.

Strict source-only answers

Required

Never expose generated content unless every substantive claim passes citation verification.

Refuse on requested-source mismatch

Do not silently answer from a related document when the requested title is unavailable.

Allow optional related-source answer

After a mismatch refusal, permit the user to request a separately labelled answer from related sources.

Exact quotation verification

Required

Reject any quotation that cannot be found verbatim in the cited immutable chunk.

Data retention

Retention applies within the active tenant boundary and does not weaken immutable access-event records.

Conversation retentionUser and assistant messages, evidence and feedback.Administrator access logMinimum retention for chat-content access events.

Tenant identity

Tenant selection is validated against active membership and then applied to PostgreSQL row-level security.

Tenant display nameTenant identifierImmutable server-generated identifier.