diff --git a/package.json b/package.json
index b8f8324b..66182197 100644
--- a/package.json
+++ b/package.json
@@ -45,9 +45,11 @@
     "axios": "1.14.0",
     "chart.js": "^4.5.1",
     "date-fns": "^4.1.0",
+    "dompurify": "^3.3.3",
     "guid": "^0.0.12",
     "laravel-vite-plugin": "^3.0.0",
     "lodash": "^4.17.21",
+    "marked": "^18.0.0",
     "maska": "^3.0.4",
     "mini-svg-data-uri": "^1.4.4",
     "moment": "^2.30.1",
diff --git a/resources/scripts/features/company/ai/components/AiChatMessage.vue b/resources/scripts/features/company/ai/components/AiChatMessage.vue
index 7b2ee2ae..a02fba56 100644
--- a/resources/scripts/features/company/ai/components/AiChatMessage.vue
+++ b/resources/scripts/features/company/ai/components/AiChatMessage.vue
@@ -1,12 +1,21 @@
 <script setup lang="ts">
 import { computed } from 'vue'
 import type { AiChatMessage } from '@/scripts/types/ai-config'
+import { renderMarkdown } from '@/scripts/utils/markdown'
 
 const props = defineProps<{
   message: AiChatMessage
 }>()
 
 const isUser = computed(() => props.message.role === 'user')
+
+// Assistant messages get rendered as markdown → sanitized HTML so GFM
+// features (code blocks, lists, tables, inline formatting) display as
+// the model intended. User messages stay as plain text because the
+// user typed them verbatim and markdown syntax would be surprising.
+const renderedHtml = computed(() =>
+  isUser.value ? '' : renderMarkdown(props.message.content ?? ''),
+)
 </script>
 
 <template>
@@ -22,10 +31,16 @@ const isUser = computed(() => props.message.role === 'user')
           : 'bg-surface-tertiary text-body'
       "
     >
-      <!-- Plain text rendering for v1 — markdown support can ship later. -->
-      <p class="whitespace-pre-wrap break-words">
+      <p v-if="isUser" class="whitespace-pre-wrap break-words">
         {{ message.content ?? '' }}
       </p>
+      <!-- Assistant output is sanitized via DOMPurify in renderMarkdown
+           before it reaches v-html — see resources/scripts/utils/markdown.ts. -->
+      <div
+        v-else
+        class="prose prose-sm max-w-none break-words"
+        v-html="renderedHtml"
+      />
     </div>
   </div>
 </template>
diff --git a/resources/scripts/utils/markdown.ts b/resources/scripts/utils/markdown.ts
new file mode 100644
index 00000000..374102da
--- /dev/null
+++ b/resources/scripts/utils/markdown.ts
@@ -0,0 +1,42 @@
+import { marked } from 'marked'
+import DOMPurify from 'dompurify'
+
+/**
+ * Render a markdown string to safe, sanitized HTML.
+ *
+ * Used by the AI chat drawer to render assistant responses. Even though
+ * the AI provider controls the immediate source of the content, the model
+ * can echo anything it's fed — including user input from earlier in the
+ * conversation or tool results from the database. We therefore parse
+ * markdown → HTML via marked and then sanitize the result with DOMPurify
+ * before handing it to Vue's v-html.
+ *
+ * Marked is configured with:
+ *   - gfm: true      — GitHub-flavored markdown (tables, fenced code,
+ *                      strikethrough, task lists). Matches what users
+ *                      already expect from any modern chat UI.
+ *   - breaks: true   — newlines become <br> so a single user-typed line
+ *                      break renders as a visual break without needing
+ *                      two trailing spaces.
+ *   - async: false   — force synchronous parsing so the caller doesn't
+ *                      have to await; marked defaults to returning a
+ *                      Promise when extensions are registered.
+ *
+ * DOMPurify is run in its default browser profile which strips <script>,
+ * event handlers, javascript: URLs, and every other HTML vector. We do
+ * NOT customize ALLOWED_TAGS because marked's output is already a
+ * conservative subset of HTML.
+ */
+export function renderMarkdown(source: string): string {
+  if (!source) {
+    return ''
+  }
+
+  const rawHtml = marked.parse(source, {
+    gfm: true,
+    breaks: true,
+    async: false,
+  }) as string
+
+  return DOMPurify.sanitize(rawHtml)
+}
diff --git a/yarn.lock b/yarn.lock
index 11a5d372..4ff0f68b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -38,28 +38,6 @@
     "@babel/helper-string-parser" "^7.27.1"
     "@babel/helper-validator-identifier" "^7.28.5"
 
-"@emnapi/core@^1.7.1":
-  version "1.9.2"
-  resolved "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz"
-  integrity sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==
-  dependencies:
-    "@emnapi/wasi-threads" "1.2.1"
-    tslib "^2.4.0"
-
-"@emnapi/runtime@^1.7.1":
-  version "1.9.2"
-  resolved "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz"
-  integrity sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==
-  dependencies:
-    tslib "^2.4.0"
-
-"@emnapi/wasi-threads@1.2.1":
-  version "1.2.1"
-  resolved "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz"
-  integrity sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==
-  dependencies:
-    tslib "^2.4.0"
-
 "@eslint-community/eslint-utils@^4.4.0", "@eslint-community/eslint-utils@^4.8.0":
   version "4.9.1"
   resolved "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz"
@@ -252,6 +230,11 @@
   resolved "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.0-rc.12.tgz"
   integrity sha512-RNrafz5bcwRy+O9e6P8Z/OCAJW/A+qtBczIqVYwTs14pf4iV1/+eKEjdOUta93q2TsT/FI0XYDP3TCky38LMAg==
 
+"@rolldown/binding-linux-x64-musl@1.0.0-rc.12":
+  version "1.0.0-rc.12"
+  resolved "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.0-rc.12.tgz"
+  integrity sha512-Jpw/0iwoKWx3LJ2rc1yjFrj+T7iHZn2JDg1Yny1ma0luviFS4mhAIcd1LFNxK3EYu3DHWCps0ydXQ5i/rrJ2ig==
+
 "@rolldown/pluginutils@1.0.0-rc.12":
   version "1.0.0-rc.12"
   resolved "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.12.tgz"
@@ -292,6 +275,11 @@
   resolved "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.2.2.tgz"
   integrity sha512-rTAGAkDgqbXHNp/xW0iugLVmX62wOp2PoE39BTCGKjv3Iocf6AFbRP/wZT/kuCxC9QBh9Pu8XPkv/zCZB2mcMg==
 
+"@tailwindcss/oxide-linux-x64-musl@4.2.2":
+  version "4.2.2"
+  resolved "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.2.2.tgz"
+  integrity sha512-XW3t3qwbIwiSyRCggeO2zxe3KWaEbM0/kW9e8+0XpBgyKU4ATYzcVSMKteZJ1iukJ3HgHBjbg9P5YPRCVUxlnQ==
+
 "@tailwindcss/oxide@4.2.2":
   version "4.2.2"
   resolved "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.2.2.tgz"
@@ -591,6 +579,11 @@
   resolved "https://registry.npmjs.org/@types/prismjs/-/prismjs-1.26.6.tgz"
   integrity sha512-vqlvI7qlMvcCBbVe0AKAb4f97//Hy0EBTaiW8AalRnG/xAN5zOiWWyrNqNXeq8+KAuvRewjCVY1+IPxk4RdNYw==
 
+"@types/trusted-types@^2.0.7":
+  version "2.0.7"
+  resolved "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz"
+  integrity sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==
+
 "@types/web-bluetooth@^0.0.21":
   version "0.0.21"
   resolved "https://registry.npmjs.org/@types/web-bluetooth/-/web-bluetooth-0.0.21.tgz"
@@ -1007,6 +1000,13 @@ detect-libc@^2.0.3:
   resolved "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz"
   integrity sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==
 
+dompurify@^3.3.3:
+  version "3.3.3"
+  resolved "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz"
+  integrity sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==
+  optionalDependencies:
+    "@types/trusted-types" "^2.0.7"
+
 dunder-proto@^1.0.1:
   version "1.0.1"
   resolved "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz"
@@ -1422,6 +1422,11 @@ lightningcss-linux-x64-gnu@1.32.0:
   resolved "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz"
   integrity sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==
 
+lightningcss-linux-x64-musl@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz"
+  integrity sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==
+
 lightningcss@^1.32.0, lightningcss@1.32.0:
   version "1.32.0"
   resolved "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz"
@@ -1500,6 +1505,11 @@ markdown-it@^14.0.0:
     punycode.js "^2.3.1"
     uc.micro "^2.1.0"
 
+marked@^18.0.0:
+  version "18.0.0"
+  resolved "https://registry.npmjs.org/marked/-/marked-18.0.0.tgz"
+  integrity sha512-2e7Qiv/HJSXj8rDEpgTvGKsP8yYtI9xXHKDnrftrmnrJPaFNM7VRb2YCzWaX4BP1iCJ/XPduzDJZMFoqTCcIMA==
+
 maska@^3.0.4:
   version "3.2.0"
   resolved "https://registry.npmjs.org/maska/-/maska-3.2.0.tgz"