Security
Everything in the Falcon Veritas Intelligence platform that lives under security. 8 articles · maintenance scorecard updated monthly.
What lives here
This section of the support center is the canonical reference for security on FVI. It covers every product surface, every operational concern, and every compliance beat that touches security at a global bank.
Each article below is owned by a domain engineer and reviewed monthly by Bianca (brand consistency) and Aria (accessibility). Source-of-truth code paths in src/lib/security/ are linked in-line.
Articles
Authentication & authorization
Bearer JWT, MFA, step-up auth, break-glass, session policies.
ReadEncryption
AES-256-GCM field encryption, Vault-wrapped DEKs, KEK rotation.
ReadTenant isolation
Four layers of defense — RLS, JWT claims, Vault, network — verified by tests.
ReadAudit trail
Every read, write, and admin action lands in security_events.
ReadRLS policies
How row-level security is enforced in Supabase Postgres.
ReadCompliance
Cross-link to SOC 2, ISO 27001, GDPR, PCI, and residency controls.
ReadSecrets management
Supabase Vault, per-tenant namespaces, key rotation cadence.
ReadVulnerability disclosure
Coordinated disclosure policy, PGP key, response SLA.
ReadAdjacent sections
Security does not exist in isolation. The most-asked-for cross-references from this surface are:
Getting started
FVI surface: getting started.
OpenReconciliation
FVI surface: reconciliation.
OpenAI
FVI surface: ai.
OpenExceptions
FVI surface: exceptions.
OpenData sources
FVI surface: data sources.
OpenAPI
FVI surface: api.
OpenIntegrations
FVI surface: integrations.
OpenCompliance
FVI surface: compliance.
OpenQuick reference
| What you want to do | Where to go |
|---|---|
| Run a security task for the first time | Quickstart |
| Fix a broken security workflow | Troubleshooting |
| Understand the security engine architecture | Architecture diagrams in docs.falconveritas.com/architecture |
| See the latest security changes | Release notes |
| Audit, residency, or PII controls touching security | Security + Compliance |
Last updated: 2026-08-22 · Section owner: Documentation · Maintenance scorecard: 100% reviewed in last 90 days.