Least privilege
Initial connectors request read-only scopes wherever possible. Write permissions are separated and are not activated without a corresponding controlled workflow.
Connected context without surrendering control.
Neovois is designed around delegated access, explicit consent, encrypted connector tokens, source provenance and human approval before external actions.
Encrypted server-side storage
Connector tokens are encrypted at rest. Browsers receive opaque, HTTP-only session identifiers rather than provider access tokens.
Verified inbound events
Slack, Meta and Telegram endpoints validate provider signatures or shared secrets before accepting event metadata.
Source provenance
Normalised records keep source identifiers so briefings and recommendations can be traced back to their evidence.
Approval boundaries
Proposed actions remain separate from execution. The current live connector cannot send messages, edit events or modify files.
Export and deletion
Authenticated users can export their stored pilot data, disconnect providers and delete their Neovois account data.