Specimen is alpha. This page is honest about what that means.
Hardened
01TLS for all traffic. HSTS, secure-cookies, CSP headers.
02Per-corpus encryption at rest; keys rotated quarterly.
03Every draft signed with pipeline version + corpus hash.
04No third-party analytics on the app. Only the landing carries basic pageview.
05Workers + Static Assets — no long-lived servers, no databases on the edge.
Alpha caveats
01Alpha: the model sometimes re-paraphrases a claim in a way the source doesn't fully support. Every inline cite is traceable — please check before publishing.
02PDF text extraction is not perfect on heavily-typeset journal PDFs. Tables and equations sometimes lose structure.
03No SOC 2, no ISO 27001 yet. Not for regulated workflows.
04Uploaded PDFs are retained for the session by default; longer retention is opt-in.
05No team / multi-user workspaces in v0.9. One review = one session.
This is a portfolio pilot — not for production use without a security review appropriate to your context.