Docs
Nothing about SecureMind is hidden. The guides, diagrams and design decisions live in the repository and change as the project does, so these links always open the current version.
Guides
Feature Guide
What SecureMind does and how to use it: chat, sensitive-data review, Knowledge, memory, models and cost.
Technical Guide
How it is built: detection, retrieval, model routing, storage, security rules and the hosted architecture.
Education Guide
A plain walk through the ideas behind it, for someone new to the subject.
Architecture
Docker Compose starts the app, Postgres, local sign-in and the local models. Anything that leaves the machine is optional and only used after you configure it.
Select the picture to open it full size. Editable source (draw.io)
Amplify serves the app, API Gateway and Lambda stream the chat, Cognito signs people in and DynamoDB holds memory and the vector index. Terraform creates all of it.
Select the picture to open it full size. Editable source (draw.io)
For what the AWS resources cost, see Costs.
Install and operate
- Run it on your computer (Docker)
- Run it in your AWS account, from zero
- Use your own domain name
- Static sites on S3 and CloudFront
- Two-step sign-in
The short version is on the Install page.
Why it is built this way
Each big choice is written down as a short decision record: what the options were, what was picked and why.
- 0001 Ingestion pipeline
- 0002 Storage choice
- 0003 Local AWS scaffolding
- 0004 Amplify and Lambda hosting
- 0005 Admin security policy
- 0006 On-prem Docker
- 0007 Hosted DynamoDB vectors
- 0008 Terraform and GitHub OIDC
The whole index is in the repository at docs/README.md.