Data Security & PII Protection

flowchart TD
    subgraph CLIENT["Browser - Client-Side"]
        A1["Advisor selects document\n(image/PDF)"]
        A2["Browser upload client\n(direct-to-S3)"]
    end

    subgraph EDGE1["Supabase Edge Function\n(analyze-strategy)"]
        B1["get_upload_url action\nGenerates pre-signed S3 URL\n300-second TTL"]
    end

    subgraph AWS["AWS Infrastructure"]
        C1["S3 Bucket\nBlockPublicAccess\nAES-256 at rest"]
        C2["Lambda Function\n(stateless)\nAWS Textract OCR\n→ Raw text extraction"]
    end

    subgraph EDGE2["Supabase Edge Function\n(extract-liabilities / extract-fees)"]
        D1["Invoke processor\nTriggers Lambda"]
        D2["Receives sanitized text\nfrom Lambda"]
        D3["Gemini 2.5 Flash\nStructured extraction\n(JSON schema enforcement)"]
        D4["Usage tracking\n→ Privacy Guardrail audit write"]
    end

    subgraph GUARDRAIL["Privacy Guardrail Layer"]
        G1["Text pattern scan\n6 PII pattern types"]
        G2["Object key redaction\n10+ sensitive keys"]
        G3["Audit write\nDouble-sanitize before store"]
    end

    subgraph DB["Supabase PostgreSQL"]
        E1["AI audit log\n(sanitized payloads)"]
        E2["Usage metrics\n(token counts, costs)"]
    end

    A1 -->|"1. Request upload URL"| B1
    B1 -->|"2. Return signed URL + object key"| A2
    A2 -->|"3. PUT file directly to S3\n(browser to S3, no server)"| C1
    C1 -->|"4. Lambda triggered"| C2
    D1 -->|"5. Edge invokes Lambda"| C2
    C2 -->|"6. Returns OCR text"| D2
    D2 -->|"7. Text sent to Gemini"| D3
    D3 -->|"8. Structured JSON returned"| CLIENT

    D4 --> GUARDRAIL
    GUARDRAIL --> E1
    D4 --> E2

    style CLIENT fill:#1e293b,stroke:#3b82f6,color:#e2e8f0
    style AWS fill:#0f172a,stroke:#f59e0b,color:#e2e8f0
    style EDGE1 fill:#1e293b,stroke:#22c55e,color:#e2e8f0
    style EDGE2 fill:#1e293b,stroke:#22c55e,color:#e2e8f0
    style GUARDRAIL fill:#1e293b,stroke:#ef4444,color:#e2e8f0
    style DB fill:#0f172a,stroke:#8b5cf6,color:#e2e8f0
                    

flowchart LR
    subgraph FUNCTIONS["Edge Functions Using Guardrail"]
        F1["analyze-strategy\n(WealthLens IQ)\nClaude Haiku 4.5"]
        F2["strategy-architect-v3\n(AI Architect)\nClaude Sonnet 4.6"]
        F3["extract-liabilities\n(Doc Parser)\nGemini 2.5 Flash"]
        F4["extract-fees\n(Fee Extractor)\nGemini 2.5 Flash"]
        F5["lens-guide\n(Advisor Help)\nClaude Haiku 4.5"]
        F6["client-chat-v3\n(Client AI)\nClaude Haiku 4.5"]
        F7["guideline-gary\n(Guideline Expert)\nClaude Sonnet 4.6\n+ forced web search"]
    end

    subgraph GUARDRAIL["Privacy Guardrail"]
        G1["Sanitize payload\nBefore AI call"]
        G2["Audit write\nAfter AI call\n(double-sanitized)"]
    end

    subgraph AUDIT["AI Audit Log"]
        A1["Sanitized input_payload\nOutput summary\nToken usage\nUser/Session ID"]
    end

    F1 --> G1
    F2 --> G1
    F3 --> G1
    F4 --> G1
    F5 --> G1
    F6 --> G1
    F7 -->|"audit-log sanitize only"| G2
    G1 --> G2
    G2 --> A1

    style FUNCTIONS fill:#1e293b,stroke:#3b82f6,color:#e2e8f0
    style GUARDRAIL fill:#1e293b,stroke:#ef4444,color:#e2e8f0
    style AUDIT fill:#0f172a,stroke:#8b5cf6,color:#e2e8f0
                    

flowchart TD
    subgraph EPHEMERAL["Ephemeral - Destroyed After Use"]
        E1["Raw document file\n(in browser memory)"]
        E2["S3 object\n(retained per policy)"]
        E3["Lambda execution\n(stateless, destroyed)"]
        E4["OCR raw text\n(in-memory only)"]
        E5["LLM conversation\n(zero-retention)"]
    end

    subgraph PERSISTED["Persisted - Encrypted at Rest"]
        P1["AI audit log\n- Sanitized input\n- Output summary\n- Token usage"]
        P2["Usage metrics\n- Per-function totals\n- Cost tracking"]
        P3["Client file record\n- Extracted financial fields\n- Scenarios and settings"]
    end

    subgraph NEVER["Never Stored"]
        N1["SSN / Tax ID"]
        N2["Full account numbers"]
        N3["Dates of birth"]
        N4["Street addresses\n(in AI context)"]
        N5["Email / Phone\n(in AI context)"]
    end

    E1 -->|"Signed URL PUT"| E2
    E2 -->|"Lambda reads"| E3
    E3 -->|"Textract OCR"| E4
    E4 -->|"LLM analyzes"| E5

    E5 -->|"Sanitized logging"| P1
    E5 -->|"Token tracking"| P2
    E5 -->|"Extracted fields\napplied to UI"| P3

    style EPHEMERAL fill:#1e293b,stroke:#ef4444,color:#e2e8f0
    style PERSISTED fill:#0f172a,stroke:#22c55e,color:#e2e8f0
    style NEVER fill:#44403c,stroke:#78716c,color:#a8a29e