SSO/SAML · RBAC · DLP · PII redaction · Audit trails · Customer-managed keys. Retrieval-first with citations.