Security, privacy and assurance

Current disclosure scope. An empty ledger means no public claim, not zero risk.

Architecture and data handling

Application controls include tenant/project authorization, field visibility, redacted audit records, retention policy and protected storage references. Regional deployment, customer-managed keys and backup restoration remain Beta pending infrastructure proof.

Privacy notice · Vulnerability disclosure

Independent certification

No independent certifications are currently claimed.

Self-attestation

  • Secure-development and architecture controls documented in the repository. This is self-attested, not independently certified.

Subprocessors

No public subprocessor list has been verified for publication. Buyers should request the current contractual list during due diligence.

Availability history

No independently verified public availability history is published yet; no uptime percentage is claimed.