Most RAG systems retrieve data efficiently but ignore a critical question: should this user access this information? When building RAG pipelines with vector databases, retrieval accuracy is only half the challenge. Without proper access control, your system might serve confidential documents to unauthorized users—a vulnerability OWASP flags as a top 10 LLM risk. Here's how to address it: → Use permission systems like SpiceDB to define relationship-based access control → Model granular permissions that match your organization's access policies → Apply authorization checks pre-retrieval or post-retrieval Our latest article from Sohan Maheshwar at @authzed breaks this down: pinecone.io/learn/rag-access…

Stardew Valley, RAG, and fine-grained authorization? Yes please! Our friends at @authzed and @motiadev show you how to build a RAG-enabled harvest logbook for your farm. In this post, you'll': ▪️ Build event-driven workflows with Motia steps ▪️ Implement RAG with text chunking, embeddings, and vector search using OpenAI and Pinecone ▪️ Add fine-grained authorization using SpiceDB's relationship model ▪️ Handle async operations with event emission Read more and grab the code here ⤵️  authzed.com/blog/building-a-…

Did you miss out on last week’s webinar with Sohan Maheshwar from @authzed and our own @jennapederson on how to prevent unauthorized data access in your RAG apps? Don’t worry, we’ve got you covered. Watch the replay anytime 👉 youtu.be/S6xJ0Kkd7ss Or grab the code from the replies ⤵️

Building enterprise-ready AI systems means ensuring users can only augment prompts with data they're authorized to access. Join Sohan Maheshwar, Lead Developer Advocate at @authzed, and @jennapederson, Staff Developer Advocate at Pinecone for a webinar tomorrow where they’ll cover the benefits of using ReBAC to safeguard sensitive data in RAG pipelines. You’ll learn about: ✨ why fine-grained authorization matters for RAG ✨ how ReBAC enables authorization decisions using relationships, not just roles We’ll do a demo with Pinecone, LangChain, OpenAI, and SpiceDB and you’ll get an opportunity to ask questions. 👉 Last chance to register → pinecone-io.zoom.us/webinar/… 🗓 Thursday, September 25, 2025 ⏰ 9 am PT / 12pm ET

Building enterprise AI? Authorization isn't optional—it's critical. Join Pinecone and @authzed for a webinar “Secure Your RAG Pipelines With Fine Grained Authorization using SpiceDB" and discover how to prevent unauthorized data access in your RAG apps. We’ll have working code and examples using Pinecone, LangChain, OpenAI & SpiceDB that you can apply immediately. Attendees will learn: ▫️ why fine-grained authorization matters for RAG ▫️ how ReBAC enables authorization decisions using relationships, not just roles Stick around for Q&A with hosts @jennapederson and Sohan Maheshwar. 🗓 Thursday, September 25, 2025 ⏰ 9 am PT / 12pm ET 🔗 Register now: pinecone-io.zoom.us/webinar/…