Built to handle hostile input.

Everything submitted to Prooflume is assumed to be an attack: on you, on our tools, or on the model. These are the commitments that follow, and how each one is kept.

Your browser never opens a submitted link.

Links are shown as text with a copy button, never as links. When a link is inspected, a separate fetcher with no credentials and no access to our data requests it once. It refuses private and internal addresses, re-checks the address it actually connects to, and follows redirects only through the same checks.

Model output is not evidence.

Only tools create evidence. Claims a model extracts must match an exact span of your text, narrative sentences must cite evidence, and the verdict comes from deterministic rules. A message that tries to instruct the model is treated as text to investigate.

Paid lookups need your approval.

Third-party providers are off unless you turn them on for a case, and each lookup waits for your decision on the exact request. The decision is bound to a hash of that request, so a changed request needs a new approval.

Spending is capped by the application.

Each investigation has a model budget (by default up to $0.25), each account a daily case limit, and the service a monthly model budget. A case that would exceed its cap stops and says so.

Sessions cannot be read by scripts.

The session is an HttpOnly, SameSite=Strict cookie, scoped to this site. Requests that change anything must be JSON and must come from this site's own origin.

Cases are private to your account.

Every case, event, piece of evidence, approval and export is looked up within your tenant. A case id from another account returns “not found”, not “forbidden”.

Keys stay on the server.

Model and provider API keys live only with the worker that uses them. They are never sent to the browser, written to logs or included in exports.

Exports are redacted, on a best-effort basis.

Exported reports redact personal details in free text while keeping timestamps, IP addresses and structured evidence fields intact. Redaction is best effort: review a file before sharing it.

Prooflume is in early access and has not been through an external audit yet. Found a problem? Tell the operator of the deployment you are using; a public security contact will be published before general availability.