Upload PDFs/Docs, get AI summaries & tags, and find anything instantly — with real guardrails: server-side RBAC/RLS, scoped mutations, audit logs, expiring share links, and rate-limited exports.
Built with Next.js + Supabase + Stripe + Sentry. Focused on “production details”, not just UI.

A simple workflow designed for teams: ingest, enrich, and search — with guardrails.
Drop PDFs/Docs. Storage limits are enforced by actual content size to prevent silent overages.
Generate summaries and metadata with quota enforcement on every AI feature — no bypass paths.
Find docs instantly, share with expiring links, and audit critical actions (org ops, sharing, billing).
Every AI-related feature consumes quota server-side — no client-side bypasses, consistent usage tracking.
Owner/Admin/Member permissions enforced in server actions, aligned with database RLS for long-term safety.
Expiring share links (plan-based), token rotation, critical actions logged to audit trail + Sentry tags for alerts.
Prices are fetched from Stripe when available (best-effort).
Tight scopes everywhere: user_id-scoped mutations and fetches, org RBAC for management actions, rate-limited heavy APIs (export), and an audit log for critical operations.