Document Security Governance

Security applied at one interface is not security. A document correctly restricted in a repository and freely retrievable through a search index, an API or an assistant is unprotected, and the organization usually does not discover the second route until someone reports seeing something they should not. Governance that travels with the record rather than attaching to a door is the only arrangement that closes this.

Entitlement in Centralpoint is a record property evaluated wherever the record is reached, so the same assignment governs the repository, the search index and the AI surface. Material excluded during ingestion is not embedded at all, which means no phrasing can reach it — the guarantee is about contents rather than about filter coverage.