New guardrails for security and compliance

A configurable policy layer for PII redaction, content restrictions, and compliance rules — covering SOC 2 Type 2, ISO/IEC 27001:2022, PCI-DSS 4.0, and HIPAA. It includes content safety, prompt-attack defense, sensitive-data scrubbing, audit logs, encryption, and regular pen testing.

These guardrails are table-stakes for enterprise and regulated-industry deals — healthcare and finance in particular — where they're often a security-review blocker if missing.