Security & trust

The rules the pipeline enforces

1. Pixels never come from AI. Rendering is deterministic, tested code applying your committed brand specification. AI may author content where you allow it; it never draws your deliverable.
2. Every artifact carries its egress class. zero-egress or contract-protected — written by the pipeline based on what actually happened to the job, never by hand. A job that touched an AI model cannot be labelled zero-egress.
3. On-prem mode contains no AI at all. No model, no cloud, no internet in the pipeline — verified at installation, on your hardware, offline. Here zero-egress means nothing leaves the premises.
4. AI authoring is fail-closed. In client-cloud mode, if the data-processing attestation for the LLM provider you bring is not in place, AI calls refuse to run. Spend is capped per job, on your own account.
5. Two meanings of zero-egress, never blurred. On-prem zero-egress means nothing leaves the premises (no internet). In DocMark cloud, zero-egress means no PII reaches the execution plane — identity stays in the control plane, the render worker never sees it. The pipeline labels each according to what it actually enforces.
6. Synthetic media is consent-gated and disclosed — always. When video featuring a presenter likeness or a cloned voice ships (it is on the roadmap, not yet in any mode), it will require recorded consent before the pipeline will produce it, and the deliverable will disclose that it is synthetic. No product flag, mode, or entitlement can bypass this.
7. Nothing unverified is delivered. A deterministic verification gate runs on every job, in every mode — blank/failed-page and contrast checks for decks; structural and integrity checks for documents, spreadsheets and brochures; duration and container-integrity checks for video. Deeper visual proof-reading (logo, colour, overflow, AI-vision) is on the roadmap. A failing deliverable is withheld, with findings.

Provenance you can audit

Every deliverable records exactly which version of your brand specification produced it. When your brand changes — new logo, new palette, new template — you can prove which documents were produced under which rules, months later.

What “verified” means (and doesn’t)

Verified means the deliverable passed the visual-QA gate: layout, branding, logo placement, text fit. It does not mean DocMark fact-checked the content — your authors (human or AI) own the substance, and web-research outputs ship with cited sources so your reviewers can check them. This holds in every mode.

Want the detail? The security one-pager covers the trust boundaries, the egress classes, and the consent gates in a form your security team can file.