Trust and security

Written for the people who have to sign off.

Where it runs, what gets logged, who can see what, and the current certification status. Specifics below; the one-pager on request.

Certification status.

Stated as it is. When a status changes, every page of this site updates from one source.

Standard	Status	What it covers
SOC 2 Type II	in progress	Independent audit of security, availability and confidentiality controls.
ISO 27001	in progress	Information security management system certification.
21 CFR Part 11	aware by design	Audit trails, version history and source traceability designed to be read the way an inspector reads them. Validation support for your own qualification.
GDPR	aligned	Data processing agreement available; EU data residency offered.

Runs where you need it
In your cloud or ours, with data residency in the US, EU or India. Bring your own keys. No data leaves the deployment boundary you choose.
Audit trail by default
Every run logged. Every authored value traceable to the source page it came from. Version history on documents, workflows and configuration.
Access under your control
Enterprise SSO and role-based access across every application. Credentials to your systems are brokered at the boundary, never stored inside a workflow.
Your data stays yours
Customer data never trains foundation models. Contractually, and by architecture.
One security review, every function
Applications share one deployment, one audit trail, one access model. Pass the review once; everything you add afterwards inherits it.
Built with review in mind
We answer security questionnaires with specifics, not marketing. Ask for the security summary and you'll get architecture, controls and data flows.

We'll walk through architecture, controls and data flows on a live deployment, and leave the summary behind.

Your data stays in your environment. Customer data never trains foundation models.