Blog

Insights on AI retrieval security, RAG authorization, and data governance.

All posts industry compliance legal reference-architecture architecture security rag engineering policy product comparison eu-ai-act regulation enterprise gcp getting-started rebac agents authorization ai-security postgres performance api-keys multi-cloud azure aws vertex-ai identity retrieval search launch technical integration tutorial pro-feature financial-services healthcare saas

LatestJune 21, 20267 min read

Pre-Retrieval vs Post-Retrieval Authorization

A RAG pipeline can enforce access inside the vector query or in the app after results return. Each has a distinct failure mode. Here is what breaks.

reference-architecture architecture security rag engineering

Read full article →

June 20, 20268 min readGateco Team

How to Enforce Document-Level Permissions in Enterprise RAG

Embeddings throw away the permissions your source systems already track. Here is the recipe to carry document-level permissions into a RAG pipeline.

reference-architecture rag security engineering

RBAC, ABAC, or ReBAC: Which Access Model to Use

Gateco supports role, attribute, and relationship-based access control, and you can mix them in one policy set. Here is which model fits which pattern.

reference-architecture policy security engineering

Adding Gateco to a LangChain or LlamaIndex RAG Pipeline

Gateco is not a RAG framework. It is the authorization layer you insert at the retrieval step of LangChain or LlamaIndex. Here is where it goes, and why.

reference-architecture rag engineering product

Ready to secure your AI retrievals?

Get started with Gateco in minutes. Free tier includes 100 secured retrievals per month.

Get started Read the docs