Trust

Security Overview

HumanOS AI is structured for secure SaaS deployment with buyer-owned infrastructure and keys.

Production controls

- Clerk authentication and protected app routes.

- Backend token verification through Clerk JWKS and issuer settings.

- PostgreSQL for application records and Qdrant for vector search data.

- Server-side OpenAI calls so provider keys are not exposed in the browser.

- CORS allowlist and optional Vercel preview origin regex.

- Environment-based secrets for OpenAI, database, Clerk, Qdrant, and payments.

- User memory controls with edit and delete flows.

- Docker/Vercel/Railway deployment documentation for repeatable setup.

Before public launch, configure production keys, rotate any test credentials, enable payment webhooks, review database backups, add monitoring, and update legal contact details.