No originals
Customer photos, forensic originals, completed reports, credentials, signed URLs, and private storage paths are excluded from every active provider request.

Privacy
Original evidence stays in the governed archive. External analytical tools receive only explicitly authorized, verified working derivatives.
AI processing boundary
Independent Google Gemini and Anthropic Claude analysis uses bounded requests. Google uses the GBAuthentic-controlled Vertex AI project and the United States multi-region endpoint. Project-wide Gemini caching is disabled. OpenAI is deferred and inactive.
Customer photos, forensic originals, completed reports, credentials, signed URLs, and private storage paths are excluded from every active provider request.
The application disables provider storage and caching where supported and does not create provider files, stored conversations, cached-content resources, resumable sessions, grounding requests, or provider-hosted retrieval resources.
Only an authorized, hash-verified working derivative and the bounded analytical instructions may be sent for an active request. Each active provider receives the same evidence independently and never receives another provider's output.
Provider output is advisory, attributable, and subject to qualified human review. Provider agreement cannot determine authenticity or authorize publication.