Trust Center
Security and privacy information.
Read the public summaries, discuss your review requirements and check which documents have not yet been published.
Documents & status
What is available.
Public summaries do not replace certification reports or deployment test results. We confirm which sensitive documents can be shared after agreeing the purpose and permissions for a review. “Not published” does not mean a document is available on request. View certification status
Initial register date: . Items added as “Not published” still require confirmation; they do not represent newly verified evidence.
| Resource | Availability | Access |
|---|---|---|
| Certification and assurance statusProgram status, review dates and planned completion dates. No completed certification is claimed. | Public summary | Read summary → |
| Architecture securitySecurity controls and checks to discuss for your deployment. | Public summary | Read summary → |
| Data flows and operating modesHow connected and air-gapped installations differ in access, management and data handling. | Public summary | Read summary → |
| Supported models, runtimes and environmentsA list of supported models, runtimes and environments has not been published and awaits founder confirmation. Check compatibility for your configuration before deployment. | Not published | — |
| Performance validation and service commitmentsNo benchmark report or standard service-level agreement is published here. Response-time and throughput targets, along with service commitments, require workload testing and a written agreement. | Not published | — |
| AI security testing and coverage limitsNo validated test report is published for prompt injection or data poisoning. An assessment against OWASP guidance requires agreed test cases and repeatable tests. Citing the guidance does not demonstrate certification or guarantee prevention. | Not published | — |
| Operator access and telemetryA deployment-specific access and telemetry record has not been published. Confirm operator permissions, support access, operational data sent outside the system and log handling. Access and logging depend on your configuration. | Not published | — |
| Encryption and key responsibilitiesEncryption configuration, key ownership and responsibilities to verify. | Public summary | Read summary → |
| Identity and access managementSign-in configuration, permissions and access checks for your deployment. | Public summary | Read summary → |
| Logging and audit evidenceConfirm which records can be shared during your review. Agree what is logged, who can access it, how sensitive content is removed and how long records are kept. Logging depends on your configuration. | By arrangement | Request review → |
| Vulnerability managementPublic policy and testing evidence not yet published. | Not published | — |
| PrivacyWebsite privacy policy; deployment terms reviewed separately. | Public summary | Read summary → |
| SubprocessorsPublic list and notification process not yet published. | Not published | — |
| Availability and service statusPublic service reports and incident history not yet available. | Not published | — |
| Responsible disclosurePublic reporting policy not yet published. | Not published | — |
| Regulatory control mappingsConfirm whether a review linking controls to your regulatory requirements is available for your deployment. | By arrangement | Request review → |
Procurement & security teams
Discuss your review requirements.
Tell us where the system will run and which documents your team needs. We will confirm what is available and how to proceed.
Schedule Demo