Trust

Trust center

Only principles we can evidence. Certification badges, registration numbers, and certificate scans stay unpublished.

Compliance statements

NSCDC-related status
Awaiting owner-approved wording
Public wording for this status is awaiting owner approval. Certificate numbers, scans, validity periods, and a specific certification title are not published.
NDPA-related status
Awaiting owner-approved wording
Public wording for this status is awaiting owner approval. Certificate numbers, scans, validity periods, and a specific certification title are not published.

Tenant isolation
Tenant-sensitive data is designed to be isolated with PostgreSQL Row Level Security. Application UI is not the only control.
Auditable actions
Important platform actions are intended to leave an audit trail of actor, action, and time. This is an engineering principle, not a certified control report.
Privacy
How organizational and personal data is handled at the level the product implements.
Security
Identity, tenancy, authorization, and audit.
Vulnerability reporting
How to report a suspected issue.
Responsible AI
AI output is untrusted by default. Workers operate inside permissions and human oversight. Unlimited autonomy is not offered.
Data residency
A public residency statement is not on file. Do not infer a region from this page.
Accessibility
WCAG 2.2 AA is the design objective for this public site.

Subprocessors and a data-processing addendum are unpublished until owner approval. See subprocessors.

Trust topics