Your data checks your documents. Nothing else.

your cellimagesresultsno imagesdatabaseNever used for training

Never used for training

Not for training, tuning or evaluation. Ever.

Images never hit the database

The database keeps decisions, scores, versions and hashes.

Leave cleanly

Crypto-shredded on exit: we destroy your key, so any copy left behind is unreadable.

How long things live

inbox24 h (max 30 d)results90 d (default)referencesuntil you delete them

A signature image is never shown after its input expires, and is deleted within one retention period.

Every answer, stamped.

model
nib v2.2
policy
default@1
api version
2026-09-27

Rerun a check next year and know exactly what produced it.

Access

Who can do what.

What each default role can do
PermissionOwnerAdminMemberViewerAuditorBilling
org:read See org, members, usageYesYesYesYesYesYes
org:members:manage Invite/remove members, assign rolesYesYes————
org:sso:manage Admin Portal links: SSO, directory sync, role mappingYesYes————
org:keys:manage Create/revoke API keys (within own permissions)YesYes————
org:billing:manage Checkout, billing portal, planYes————Yes
org:settings:manage Retention, org-wide settings, the API version pinYesYes————
org:audit:read Audit logYesYes——Yes—
org:children:access Act in descendant orgsYesYes——Yes—
org:children:manage Create/suspend child orgsYes—————
nib:checks:create Submit checks, sessions, liveYesYesYes———
nib:checks:read Read checks and resultsYesYesYesYesYes—
nib:subjects:read Read subjects/references metadata and thumbnailsYesYesYesYesYes—
nib:references:write Enroll references, confirm-to-learnYesYesYes———
nib:references:delete Delete references and subjects, unlearnYesYes————
nib:settings:manage Policy, learning, templates, webhooks, bucket keysYesYes————

Add your own roles, and map your identity provider’s groups to them.

Permissions in the API docs →