Security

Deterministic money math

Every calculated field on a G702/G703 — this-period amounts, retainage, balance-to-finish — is computed by a pure-function engine covered by property-based tests. AI never performs arithmetic that reaches a form; it drafts prose and parses documents only.

Immutable history

A submitted pay application is locked and shown as it was submitted. Every status change, snapshot, waiver generation and e-signature is written to an audit log, and the app has no screen to edit or delete a log entry.

Multi-tenant isolation

All queries are scoped by organization membership. Sessions are HTTP-only cookies; passwords are salted scrypt hashes.

AI guardrails

• Extraction runs use strict tool schemas; fields without a verbatim source quote are dropped for manual confirmation.
• Per-org monthly token ceilings with soft alerts at 80%.
• AI failure never blocks billing: manual entry always remains available.