Private by default
Supplier documents are stored in a private object bucket with organization-prefixed paths.
Finance data needs conservative controls.
Tenant isolation
All 26 public finance tables in the production project have Row Level Security enabled.
Human review
High-confidence suggestions still carry evidence; uncertain or complex matches require review.
Role control
Owner, Finance Admin, Accountant, Reviewer, Read Only and External Accountant roles separate duties.
Audit evidence
Review decisions and critical records are append-only where financial traceability matters.
No silent AI
Supplier intelligence is review evidence and memory, not an invisible financial decision maker.