SECURITY

Review before every write

Runrail treats extraction as a suggestion, not an action. Four steps stay separate: extract, correct, approve, write. Nothing reaches a destination file without the third step.

How the pieces are separated

Source documents stay unchanged. Extracted values sit beside the source evidence they came from, so a reviewer can check the printed page instead of trusting the software. Corrections are recorded as corrections — the original value remains visible in the history.

Server credentials stay on the server. Device requests are signed, and subscription access fails closed: when entitlement cannot be verified, paid processing stops instead of guessing.

What is still gated

The complete production threat model and the tenant-isolation checks are release gates, not paperwork for later. Public document processing stays closed until they pass.

Found a security problem? Email contact@veyact.com and describe the page or workflow. Do not send passwords, recovery codes, or API credentials — we will never ask for them by email.