PROCUREMENT READINESS
Evidence pack before adjectives.
Security overview, subprocessors, retention, export/deletion, incident handling, backup/recovery and DPA readiness are treated as verifiable procurement artifacts.
TRUST CENTRE
Verifiable controls, without vague promises.
This page shows only controls implemented or tested in the product. Third-party-dependent capabilities are published only after operational validation.
Canonical production authorityCONTROLLEDOne designated production origin; a standby environment cannot silently become runtime.
Organisation / project isolationACTIVERLS and organisation/project consistency controls.
Client write restrictionsACTIVEServer-owned identity and timestamps with bounded writes where required.
Evidence integrityACTIVEHash and storage controls preserve integrity without claiming universal authenticity.
Recovery capabilityVALIDATION OPENRuntime dependency availability is checked. PITR/restore remains subject to a dated drill before it is presented as tested.
PRIVACY BOUNDARY
Immutability does not mean keep everything forever.
Audit integrity, correction history, minimisation, retention, legal hold and lawful deletion or pseudonymisation must coexist by design.