Trust & Governance

Security, Provenance & Compliance Safeguards

Food traceability records contain proprietary formulas, supplier pricing, and sensitive client lists. BatchTrace Agent isolates tenant data, bounds AI tools, and maintains an immutable audit trail.

Row-Level Tenant Isolation (RLS)

Every table in the PostgreSQL database is indexed by `org_id` and enforced via Supabase Row Level Security. Client-submitted organization IDs are discarded; all authorizations are derived from cryptographic server session tokens.

Private Open-Weight Inference

Our open-weight model architecture (Qwen3-4B / local Ollama) processes document fields in private memory. Customer invoices, recipes, and contact records are never ingested into third-party public foundation model training corpora.

Strict Provenance Grounding

Every lot code, weight measurement, and carrier dispatch must cite a verified storage document ID, exact page number, and row. AI responses that fail schema validation or contain ungrounded IDs are rejected by the runtime.

Immutable Audit Trail

Every document extraction approval, quantity flag, trace execution, and incident status advance logs actor name, email, timestamp, and JSON before/after state diffs to support FDA FSMA 204 audits and GFSI certifications.

Decision-Support Notice & Regulatory Scope

BatchTrace Agent is specialized decision-support software designed to accelerate internal record retrieval and cross-document reconciliation. It is not an autonomous food safety authority. Consequential actions such as supplier quarantines, customer notifications, or Class I/II/III food recalls must be reviewed and authorized by designated Quality Assurance leadership in accordance with your company's standard operating procedures.