Trust

Security

You stay in control. CRYSTALIZE does not capture without confirmation.

Verifiable digital record. Not automatic legal proof.

You approve every capture

Permissions (ChatGPT)

Scopes are limited to capture actions (preview, create, read, list, verify, cancel). Least privilege for the integration surface.

Architecture boundary

ChatGPT→MCP / OAuth→CRYSTALIZE→ Worker→Engine (private)→Verify

The forensic engine is not exposed on the public internet. Public API host: api.crystalize.it (allowlisted routes only).

Privacy & retention

See Privacy Policy. Audit events avoid secrets and raw tokens.

Responsible disclosure

If you believe you found a security issue in CRYSTALIZE or related Sirius surfaces, email info@siriusdetector.com with subject [SECURITY]. Include steps to reproduce. Do not include customer data. We aim to acknowledge reports promptly.

PEC: intelsirius@pec.it

What we do not do