Trust center

Procurement-safe trust posture for the platform that audits audit evidence. Claims stay conservative until third-party review is complete.

Review status

SOC 2 is in progress. HIPAA posture is BAA-ready, not HIPAA certified. Legal artifacts are templates until counsel review.

SOC 2 status

In progress. No final report claim until independent audit is complete.

BAA-ready posture under review. HIPAA has no official certification claim.

Draft list includes AI, hosting, storage, database, analytics, and support vendors subject to final vendor review.

Edge collector keeps credentials and raw evidence customer-side wherever deployment mode supports it.

Prompts are source-controlled; agent runs are traceable; humans keep review and signature authority.

Current product proof, safe claims, demo route, and diligence gaps for investor, buyer, security, and audit review.

Privacy, terms, DPA, BAA, and subprocessors pages are live as draft templates.

Self-eat SOC 2 readiness engagement is in setup; public report will link here only after evidence is collected and reviewed.