A lens on your operations, not a vault of your private conversations.
XRAY Bridge is engineered from the database layer up so leadership gets verifiable proof of shipped work and decisions without stockpiling raw call transcripts, private HR channels, or unmasked secrets.
Zero Raw Transcript Storage (`rawBufferTtlDays = 0`)
When a Zoom, Fathom, or Google Meet call finishes, XRAY Bridge extracts structured commitments, action items, and short attribution quotes in volatile memory and immediately discards the full transcript buffer. Bridge keeps a 1-2 sentence quote and the speaker's name as evidence for each fact, which you can clear or correct. Full meeting recordings are never stored at rest.
PostgreSQL Row-Level Security (RLS) on Every Query
Every tenant query executes inside a transaction scoped with `SET LOCAL app.current_org_id`. Database-level RLS policies enforce strict tenant boundaries across tasks, decisions, company memory, and agent logs.
HKDF + AES-256-GCM Per-Workspace Vault
OAuth refresh tokens and BYOK API keys are encrypted using a workspace-specific key derived via HKDF-SHA256 and AES-256-GCM authenticated encryption, with full key version rotation support.
Automatic Secret, PII & Financial Hold Queue
Before any connected MCP agent posts to Slack, updates a CRM note, or issues a Stripe refund, our policy scanner inspects the payload for live API keys, payment card numbers (masked to last 4 digits), and financial thresholds.
Private Channel Exclusions & “Viewing As” Role Preview
Workspace admins explicitly allowlist which repositories, project boards, and public Slack channels XRAY Bridge can index. Sensitive channels (such as #hr-confidential, #comp-committee, #legal-deals, and private 1:1 DMs) are blocked at the OAuth scope boundary (visibility = EXCLUDED) and dropped before any summarization or vector indexing runs.
Admins can also use the interactive “Viewing as” role simulator in Settings to verify exactly which team facts and brief items an Executive Lead, Engineering Manager, or Zero-Login Brief Recipient is permitted to see before any brief is sent.