Security & compliance
Built for the procurement review.
LibraryOS Pro is designed to pass an institutional security and privacy assessment — with the controls libraries and their IT teams actually ask about.
Deployment
- Hosting model
- On-premise inside your own network, or managed by us. The same platform either way, with an upgrade path between them.
- Model inference
- Route to a local LLM (LM Studio) in privacy-first mode, so patron data and conversations never leave the building — or to a provider you choose.
Access control
- Tenant isolation
- Every request is scoped by a signed tenant claim. Cross-tenant access is refused, not filtered.
- Roles
- super / admin / user gate who can change configuration, connectors, prompts and rules.
Data protection
- Audit trail
- Every write-back action and every approval is recorded to a shared, tamper-evident audit log you can export and analyse.
- Data-subject rights
- Export, erase and retention runs are built in as governed jobs, with exports delivered via presigned storage.
- Prompt-injection defense
- Untrusted patron input is scanned and quarantined before it reaches a model; untrusted XML is parsed safely.
Payments & licensing
- Card handling
- Fines are paid through Stripe hosted checkout — card data never touches the platform. The ledger is written only from signature-verified webhooks.
- E-book licensing
- Access is issued as Readium LCP licences, with per-content concurrency limits.
Supply chain
- Connector catalog
- The marketplace catalog is HMAC-signed and its secrets are redacted from responses, so you can trust what you install.
Observability
- Telemetry
- OpenTelemetry traces, Prometheus metrics and Grafana dashboards, plus a per-run AI execution trace for every answer.
Procurement-ready
Answers for the security questionnaire.
Deploy on your own infrastructure, keep inference local, and bring a data-processing agreement to the table. We give your IT and privacy teams the specifics they need.
On-premiseLocal LLMRBACTenant isolationAudit trailGDPR export & erasePCI-safe paymentsSigned catalogOpenTelemetryDPA available