01
Single-tenant by default
The platform deploys into the customer's cloud, not ours. Customer data does not leave the customer's environment.
Platform · Trust · How we operate
We sell into industries that got there by being careful.
We carry the same posture.
01Security
02
SOC2 Type II
Audited annually. Report available under NDA from the trust pack.
03
ISO 27001 and HDS
Audits are underway, expected to complete at the end of 2026.
04
Penetration test
Conducted annually by an independent firm. Summary report available under NDA.
05
CCEP control mapping
Available for customers in regulated industries.
02Compliance
01
EU AI Act
Registered provider. Risk classification per deployment recorded in the engagement.
02
GDPR
DPA available. Sub-processor list published; updated on every change.
03
Data residency
EU, US, and APAC regions available. Per-engagement region pinning.
04
Industry-specific
FDA 21 CFR Part 11 for life sciences, PCI-DSS for financial services, ISO 27018 for cloud personal data, on request.
03Human oversight
01
Human-in-the-loop
A runtime state, not a flag. Audited the same as every other state.
02
Workblock approvers
Role-scoped per channel. A v2 in staging requires staging-tier approval to promote.
03
The reviewing human
Recorded on the audit timeline. The reviewing human is the protagonist of the moment.
04Trust pack
Available under mutual NDA. The pack contains:
SOC2 Type II report
Latest penetration test summary
EU AI Act conformance documentation
DPA template · Sub-processor list (current)
Security white paper (60 pages) · Architecture diagram with control mapping
Once you start, you're ahead.
In the enterprise, real execution matters. That's where we lead.