[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-\u002Fhe\u002Fdocs\u002Fsecurite\u002Fprincipes":3,"docs-nav-he":435},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"body":10,"_type":429,"_id":430,"_source":431,"_file":432,"_stem":433,"_extension":434},"\u002Fhe\u002Fdocs\u002Fsecurite\u002Fprincipes","securite",false,"","עקרונות אבטחה","ארבע ההתחייבויות הבלתי-מתפשרות של betool: הפרדה מלאה בין ארגונים, ביקורת על גישה בין ארגונים, סירוב מנומק לפעולות הרסניות וריבונות על מודלי ה-LLM.",{"type":11,"children":12,"toc":420},"root",[13,29,36,48,132,138,150,191,204,210,222,228,261,267,283,288,375,385,391],{"type":14,"tag":15,"props":16,"children":17},"element","p",{},[18,21,27],{"type":19,"value":20},"text","betool מתוכננת לסביבות ",{"type":14,"tag":22,"props":23,"children":24},"strong",{},[25],{"type":19,"value":26},"מפוקחות",{"type":19,"value":28},". האבטחה אינה שכבה שנוספה בדיעבד: היא האינווריאנט המבני של כל שורת קוד, כל מיגרציה, כל מודול.",{"type":14,"tag":30,"props":31,"children":33},"h2",{"id":32},"_1-מולטי-טננט-קפדני",[34],{"type":19,"value":35},"1. מולטי-טננט קפדני",{"type":14,"tag":15,"props":37,"children":38},{},[39,41,46],{"type":19,"value":40},"כל ארגון מחזיק ",{"type":14,"tag":22,"props":42,"children":43},{},[44],{"type":19,"value":45},"בנתוניו שלו",{"type":19,"value":47}," — פייפליינים, סודות, קבצים ומפתחות LLM. הבידוד מיושם:",{"type":14,"tag":49,"props":50,"children":51},"ul",{},[52,79,97,115],{"type":14,"tag":53,"props":54,"children":55},"li",{},[56,61,63,70,72,77],{"type":14,"tag":22,"props":57,"children":58},{},[59],{"type":19,"value":60},"ברמת מסד הנתונים",{"type":19,"value":62}," — כל טבלאות העסק נושאות עמודת ",{"type":14,"tag":64,"props":65,"children":67},"code",{"className":66},[],[68],{"type":19,"value":69},"org_id",{"type":19,"value":71}," עם אינדקס, והשאילתות בצד השרת מסננות ",{"type":14,"tag":22,"props":73,"children":74},{},[75],{"type":19,"value":76},"תמיד",{"type":19,"value":78}," לפי הארגון של הסשן הפעיל.",{"type":14,"tag":53,"props":80,"children":81},{},[82,87,89,95],{"type":14,"tag":22,"props":83,"children":84},{},[85],{"type":19,"value":86},"ברמת מערכת הקבצים",{"type":19,"value":88}," — לכל ארגון שורש אחסון נפרד תחת ",{"type":14,"tag":64,"props":90,"children":92},{"className":91},[],[93],{"type":19,"value":94},"\u003Cdata_root>\u002Forgs\u002F\u003Corg_id>\u002F",{"type":19,"value":96},". אין נתיב משותף.",{"type":14,"tag":53,"props":98,"children":99},{},[100,105,107,113],{"type":14,"tag":22,"props":101,"children":102},{},[103],{"type":19,"value":104},"ברמת הקאש",{"type":19,"value":106}," — קאשים per-org; אין רשומה משותפת ללא דגל ",{"type":14,"tag":64,"props":108,"children":110},{"className":109},[],[111],{"type":19,"value":112},"is_shared = TRUE",{"type":19,"value":114}," מפורש.",{"type":14,"tag":53,"props":116,"children":117},{},[118,123,125,130],{"type":14,"tag":22,"props":119,"children":120},{},[121],{"type":19,"value":122},"ברמת הסודות",{"type":19,"value":124}," — לכל ארגון כספת נפרדת, מפתחות API משלו, טוקנים משלו. אין fallback גלובלי. גם סודות שמוזנים בתצורה של צומת (סוד HMAC, טוקן, סיסמה) ",{"type":14,"tag":22,"props":126,"children":127},{},[128],{"type":19,"value":129},"מוסתרים בכל מקום שבו התצורה נקראת מחדש",{"type":19,"value":131}," — עורך, API, כלי MCP שנקראים על ידי AI, הצעות.",{"type":14,"tag":30,"props":133,"children":135},{"id":134},"_2-ביקורת-חובה-לגישות-cross-tenant",[136],{"type":19,"value":137},"2. ביקורת חובה לגישות cross-tenant",{"type":14,"tag":15,"props":139,"children":140},{},[141,143,148],{"type":19,"value":142},"לתפקידים מסוימים (בדרך כלל מפעילי הפלטפורמה בצד ה-vendor) ",{"type":14,"tag":22,"props":144,"children":145},{},[146],{"type":19,"value":147},"עשויה",{"type":19,"value":149}," להידרש גישה לתוכן של ארגון אחר לצרכי תמיכה. גישה זו:",{"type":14,"tag":49,"props":151,"children":152},{},[153,163,181],{"type":14,"tag":53,"props":154,"children":155},{},[156,161],{"type":14,"tag":22,"props":157,"children":158},{},[159],{"type":19,"value":160},"מותנית ב-opt-in מצד הארגון היעד",{"type":19,"value":162}," — ניתן לביטול בכל עת דרך פאנל הניהול.",{"type":14,"tag":53,"props":164,"children":165},{},[166,171,173,179],{"type":14,"tag":22,"props":167,"children":168},{},[169],{"type":19,"value":170},"נרשמת ביומן עבור כל גישה",{"type":19,"value":172}," — טבלת ביקורת ייעודית, מסוננת לפי ארגון יעד, חשופה ללקוחות דרך נתיב GET‏ ",{"type":14,"tag":64,"props":174,"children":176},{"className":175},[],[177],{"type":19,"value":178},"\u002Fapi\u002Fadmin\u002Fme\u002F*-reads",{"type":19,"value":180},".",{"type":14,"tag":53,"props":182,"children":183},{},[184,189],{"type":14,"tag":22,"props":185,"children":186},{},[187],{"type":19,"value":188},"נדחית אם הביקורת נכשלת",{"type":19,"value":190}," — אין קריאה ללא עקבה.",{"type":14,"tag":15,"props":192,"children":193},{},[194,196,203],{"type":19,"value":195},"ראו ",{"type":14,"tag":197,"props":198,"children":200},"a",{"href":199},"\u002Fhe\u002Fdocs\u002Fsecurite\u002Faudit-rgpd",[201],{"type":19,"value":202},"ביקורת GDPR",{"type":19,"value":180},{"type":14,"tag":30,"props":205,"children":207},{"id":206},"_3-סירוב-מנומק-לפעולות-הרסניות",[208],{"type":19,"value":209},"3. סירוב מנומק לפעולות הרסניות",{"type":14,"tag":15,"props":211,"children":212},{},[213,215,220],{"type":19,"value":214},"כל פעולה שמשמידה או מחליפה תוכן של ארגון אחר (REPLACE-IN-PLACE, DELETE) ",{"type":14,"tag":22,"props":216,"children":217},{},[218],{"type":19,"value":219},"נדחית",{"type":19,"value":221}," אם הארגון היעד לא הפעיל את ה-opt-in לקריאה. הסיבה: ללא נראות, המפעיל מציע בעיוורון payload שעלול לדרוס את הקיים.",{"type":14,"tag":30,"props":223,"children":225},{"id":224},"_4-ריבונות-מודלי-llm",[226],{"type":19,"value":227},"4. ריבונות מודלי LLM",{"type":14,"tag":49,"props":229,"children":230},{},[231,241,251],{"type":14,"tag":53,"props":232,"children":233},{},[234,239],{"type":14,"tag":22,"props":235,"children":236},{},[237],{"type":19,"value":238},"BYOK נייטיב",{"type":19,"value":240}," — מפתחות OpenAI, Anthropic, Google שלכם מנוהלים על ידי הארגון שלכם. אין דליפה cross-org. BYOK הוא אופציונלי (קיימים מודלים מנוהלים, המחויבים בקרדיטים) אך מומלץ בסביבה מפוקחת.",{"type":14,"tag":53,"props":242,"children":243},{},[244,249],{"type":14,"tag":22,"props":245,"children":246},{},[247],{"type":19,"value":248},"מודלים פרטיים ב-Enterprise",{"type":19,"value":250}," — Ollama, vLLM מאוחסנים אצלכם או בענן הפרטי שלכם. הפרומפטים וההשלמות לא יוצאים לעולם מהפרימטר שלכם.",{"type":14,"tag":53,"props":252,"children":253},{},[254,259],{"type":14,"tag":22,"props":255,"children":256},{},[257],{"type":19,"value":258},"אין pool משותף שקוף",{"type":19,"value":260}," — אם ארגון משתמש במודל shared, מדובר בהחלטה מפורשת עם בקרת גישה.",{"type":14,"tag":30,"props":262,"children":264},{"id":263},"עמדת-ההנדסה",[265],{"type":19,"value":266},"עמדת ההנדסה",{"type":14,"tag":268,"props":269,"children":270},"blockquote",{},[271],{"type":14,"tag":15,"props":272,"children":273},{},[274,276,281],{"type":19,"value":275},"הסטנדרט שלנו הוא ",{"type":14,"tag":22,"props":277,"children":278},{},[279],{"type":19,"value":280},"דיוק",{"type":19,"value":282},": רובסטיות מקסימלית, אובזרווביליות מלאה, דטרמיניזם, אנטי-הלוצינציה, אנטי-רגרסיה, בדיקות בכל פינה.",{"type":14,"tag":15,"props":284,"children":285},{},[286],{"type":19,"value":287},"בפועל, בכל בחירה ארכיטקטונית \u002F קוד \u002F פרומפט:",{"type":14,"tag":289,"props":290,"children":291},"table",{},[292,316],{"type":14,"tag":293,"props":294,"children":295},"thead",{},[296],{"type":14,"tag":297,"props":298,"children":299},"tr",{},[300,306,311],{"type":14,"tag":301,"props":302,"children":303},"th",{},[304],{"type":19,"value":305},"בחירה",{"type":14,"tag":301,"props":307,"children":308},{},[309],{"type":19,"value":310},"הבחירה הצפויה",{"type":14,"tag":301,"props":312,"children":313},{},[314],{"type":19,"value":315},"מדוע",{"type":14,"tag":317,"props":318,"children":319},"tbody",{},[320,339,357],{"type":14,"tag":297,"props":321,"children":322},{},[323,329,334],{"type":14,"tag":324,"props":325,"children":326},"td",{},[327],{"type":19,"value":328},"זמן השהייה × 2 מול חשיבה מקוצרת",{"type":14,"tag":324,"props":330,"children":331},{},[332],{"type":19,"value":333},"× 2",{"type":14,"tag":324,"props":335,"children":336},{},[337],{"type":19,"value":338},"הדיוק שאובד נפרע באמון המשתמשים",{"type":14,"tag":297,"props":340,"children":341},{},[342,347,352],{"type":14,"tag":324,"props":343,"children":344},{},[345],{"type":19,"value":346},"לכידת observability מפורטת מול לוגים עיקריים",{"type":14,"tag":324,"props":348,"children":349},{},[350],{"type":19,"value":351},"לכידה מפורטת",{"type":14,"tag":324,"props":353,"children":354},{},[355],{"type":19,"value":356},"ללא נראות — אבחון בעיוורון",{"type":14,"tag":297,"props":358,"children":359},{},[360,365,370],{"type":14,"tag":324,"props":361,"children":362},{},[363],{"type":19,"value":364},"קיצור דרך שמדרדר התנהגות",{"type":14,"tag":324,"props":366,"children":367},{},[368],{"type":19,"value":369},"סירוב",{"type":14,"tag":324,"props":371,"children":372},{},[373],{"type":19,"value":374},"הסיכון ההתנהגותי נמדד באינצידנטים של לקוחות",{"type":14,"tag":15,"props":376,"children":377},{},[378,383],{"type":14,"tag":22,"props":379,"children":380},{},[381],{"type":19,"value":382},"מנטרה",{"type":19,"value":384},": «אם מישהו מוצא באג, זה מפני שלא שמנו מספיק ערבויות — לא מפני שהכנסנו יותר מדי.»",{"type":14,"tag":30,"props":386,"children":388},{"id":387},"להעמקה-נוספת",[389],{"type":19,"value":390},"להעמקה נוספת",{"type":14,"tag":49,"props":392,"children":393},{},[394,403,411],{"type":14,"tag":53,"props":395,"children":396},{},[397],{"type":14,"tag":197,"props":398,"children":400},{"href":399},"\u002Fhe\u002Fdocs\u002Fsecurite\u002Fmulti-tenant",[401],{"type":19,"value":402},"בידוד מולטי-טננט",{"type":14,"tag":53,"props":404,"children":405},{},[406],{"type":14,"tag":197,"props":407,"children":408},{"href":199},[409],{"type":19,"value":410},"ביקורת GDPR ויומן גישה",{"type":14,"tag":53,"props":412,"children":413},{},[414],{"type":14,"tag":197,"props":415,"children":417},{"href":416},"\u002Fhe\u002Fdocs\u002Fsecurite\u002Fdeploiement-souverain",[418],{"type":19,"value":419},"פריסה ריבונית",{"title":7,"searchDepth":421,"depth":421,"links":422},2,[423,424,425,426,427,428],{"id":32,"depth":421,"text":35},{"id":134,"depth":421,"text":137},{"id":206,"depth":421,"text":209},{"id":224,"depth":421,"text":227},{"id":263,"depth":421,"text":266},{"id":387,"depth":421,"text":390},"markdown","content:he:docs:5.securite:1.principes.md","content","he\u002Fdocs\u002F5.securite\u002F1.principes.md","he\u002Fdocs\u002F5.securite\u002F1.principes","md",[436],{"title":437,"_path":438,"children":439},"He","\u002Fhe",[440],{"title":441,"_path":442,"children":443},"Docs","\u002Fhe\u002Fdocs",[444,457,485,513,526,535,548,609],{"title":445,"_path":446,"children":447},"תחילת העבודה","\u002Fhe\u002Fdocs\u002Fdemarrer",[448,451,454],{"title":449,"_path":450},"ברוכים הבאים","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fbienvenue",{"title":452,"_path":453},"יצירת חשבון","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fcreer-un-compte",{"title":455,"_path":456},"חיבור מפתח LLM","\u002Fhe\u002Fdocs\u002Fdemarrer\u002Fbrancher-llm",{"title":458,"_path":459,"children":460},"ערוצים","\u002Fhe\u002Fdocs\u002Fcanaux",[461,464,467,470,473,476,479,482],{"title":462,"_path":463},"סקירת הערוצים","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fvue-densemble",{"title":465,"_path":466},"טלפוניה בזמן אמת","\u002Fhe\u002Fdocs\u002Fcanaux\u002Ftelephone",{"title":468,"_path":469},"אימייל","\u002Fhe\u002Fdocs\u002Fcanaux\u002Femail",{"title":471,"_path":472},"Chat widget לאתר","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fchat-widget",{"title":474,"_path":475},"Webhook HTTP","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fwebhook",{"title":477,"_path":478},"מסרים מיידיים (WhatsApp, Messenger, Telegram, Mattermost)","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fmessageries",{"title":480,"_path":481},"Meta Lead Ads","\u002Fhe\u002Fdocs\u002Fcanaux\u002Ffacebook-leads",{"title":483,"_path":484},"תזמון (cron)","\u002Fhe\u002Fdocs\u002Fcanaux\u002Fschedule",{"title":486,"_path":487,"children":488},"פייפליינים","\u002Fhe\u002Fdocs\u002Fpipelines",[489,492,495,498,501,504,507,510],{"title":490,"_path":491},"העורך הויזואלי","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fediteur-visuel",{"title":493,"_path":494},"סוכני AI","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fagents",{"title":496,"_path":497},"אופרטורים דטרמיניסטיים","\u002Fhe\u002Fdocs\u002Fpipelines\u002Foperateurs",{"title":499,"_path":500},"בקרת זרימה","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fcontrole-flux",{"title":502,"_path":503},"שלבי קוד","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fcode-step",{"title":505,"_path":506},"תת-פייפליינים","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fsous-pipelines",{"title":508,"_path":509},"פעולות ללא קוד","\u002Fhe\u002Fdocs\u002Fpipelines\u002Factions-no-code",{"title":511,"_path":512},"בסיס ידע","\u002Fhe\u002Fdocs\u002Fpipelines\u002Fbase-de-connaissances",{"title":514,"_path":515,"children":516},"פיקוח","\u002Fhe\u002Fdocs\u002Fsupervision",[517,520,523],{"title":518,"_path":519},"היסטוריית ביצועים","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fexecutions",{"title":521,"_path":522},"קרדיטים ומדידת צריכה","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fcredits-metering",{"title":524,"_path":525},"Benchmarks","\u002Fhe\u002Fdocs\u002Fsupervision\u002Fbenchmarks",{"title":527,"_path":528,"children":529},"אבטחה","\u002Fhe\u002Fdocs\u002Fsecurite",[530,531,533,534],{"title":8,"_path":4},{"title":532,"_path":399},"מולטי-טננט קפדני",{"title":410,"_path":199},{"title":419,"_path":416},{"title":536,"_path":537,"children":538},"מפתחים","\u002Fhe\u002Fdocs\u002Fdeveloppeurs",[539,542,545],{"title":540,"_path":541},"API admin","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fapi-admin",{"title":543,"_path":544},"Webhooks יוצאים","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fwebhooks-sortants",{"title":546,"_path":547},"שליטה ב-betool מתוך Claude (MCP)","\u002Fhe\u002Fdocs\u002Fdeveloppeurs\u002Fmcp",{"title":549,"_path":550,"children":551},"אינטגרציות","\u002Fhe\u002Fdocs\u002Fintegrations",[552,555,558,561,564,567,570,573,576,579,582,585,588,591,594,597,600,603,606],{"title":553,"_path":554},"סקירת האינטגרציות","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fvue-densemble",{"title":556,"_path":557},"Stripe","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fstripe",{"title":559,"_path":560},"GitHub","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fgithub",{"title":562,"_path":563},"Google","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fgoogle",{"title":565,"_path":566},"LinkedIn Ads","\u002Fhe\u002Fdocs\u002Fintegrations\u002Flinkedin-ads",{"title":568,"_path":569},"Kavkom","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fkavkom",{"title":571,"_path":572},"Jira","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fjira",{"title":574,"_path":575},"Slack","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fslack",{"title":577,"_path":578},"SMS","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fsms",{"title":580,"_path":581},"Enable Banking (open banking)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fenable-banking",{"title":583,"_path":584},"CRM, שיווק ופרודוקטיביות","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fcrm-marketing",{"title":586,"_path":587},"HeyGen (וידאו)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fheygen",{"title":589,"_path":590},"La Poste","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fla-poste",{"title":592,"_path":593},"CRM עסקי (beTool Application, Qhare)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fcrm-metier",{"title":595,"_path":596},"Mitti (בדיקות שטח)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fmitti",{"title":598,"_path":599},"Meta (Messenger, Pages, Meta Ads)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fmeta",{"title":601,"_path":602},"Onoff Business (Beta)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fonoff",{"title":604,"_path":605},"Smart Life \u002F Tuya (מכשירים מחוברים)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fsmart-life",{"title":607,"_path":608},"מוצרי beTool (Desktop, Kiosk, Terminal)","\u002Fhe\u002Fdocs\u002Fintegrations\u002Fproduits-betool",{"title":610,"_path":611,"children":612},"תרחישי שימוש","\u002Fhe\u002Fdocs\u002Fcas-usage",[613,616,619,622,625,628],{"title":614,"_path":615},"סוכנים עסקיים לדוגמה","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fvue-densemble",{"title":617,"_path":618},"CFO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcfo-ia",{"title":620,"_path":621},"COO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcoo-ia",{"title":623,"_path":624},"CTO IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fcto-ia",{"title":626,"_path":627},"Product Manager IA","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fproduct-manager-ia",{"title":629,"_path":630},"עוזר אישי","\u002Fhe\u002Fdocs\u002Fcas-usage\u002Fassistant-personnel"]