Trust
Clear controls.
Clear commitments.
How access is enforced, how evidence is kept, and where our security work stands.
Fail-closed by design
Unknown or unreachable means deny. If the policy engine can't be reached, access is denied.
Audit you can't edit
The audit trail is append-only, enforced in the database. Even an admin can't edit it.
Tenant isolation
Every query is scoped to your workspace.
Security reviews
We share our architecture and data-flow documentation with prospective customers. A CSA STAR Level 1 self-assessment and an independent penetration test are planned; ask us for the current status.
Compliance
SOC 2 is on our roadmap. We'll tell you exactly where it stands.
Connector source
The private-network connector's source will be available to customers under NDA.
Report a vulnerability
Email [email protected]; we acknowledge within 2 business days. Please don't test against other customers' data.