Security Overview

Enterprise-grade isolation by default.

PostgreSQL Relational Storage

User authentication, organizational RBAC, billing history, and chat transcripts are securely persisted in an isolated PostgreSQL instance. All passwords are Argon2 hashed. Session tokens utilize strict HTTP-only cookies to defeat Cross-Site Scripting (XSS) vectors.

Qdrant Vector Isolation

my-web.ai leverages Qdrant for blazing-fast semantic similarity search. Instead of a multi-tenant monolith, we programmatically spin up independent, cryptographically isolated collections for every single project. A leak across accounts is mathematically and architecturally impossible.

AI Model Confidentiality

We run highly optimized Large Language Models in pure inference mode. This means the AI reads your context to answer a question, and immediately flushes it from memory. The models are frozen; they do not learn, memorize, or leak your proprietary organizational data to other customers.