Skip to content

Trust

Security, with the evidence and the gaps on the same page

The controls below run today in the engine, in the SaaS and at the network edge. Each one was checked against code and production configuration. Whatever has not closed verification appears as In preparation, with no promised date.

Controls by category

verified · in preparation

Access control

  • Per-tenant isolation (RLS)
  • Per-source ACL, with validity and reason
  • Secrets via OpenBao (AppRole)
  • MFA on the account

Integrity & audit

  • Immutable mutation trail
  • Fact provenance
  • Contradiction detection and SHACL quarantine

Infrastructure

  • TLS at the edge
  • WAF and ban list
  • Per-route rate limit
  • Monitored health checks

Data & retention

  • Data in Brazil
  • Documented subprocessors
  • Encrypted secret-vault snapshot

In preparation

Without verified evidence as of the review date, it gets no check. No promised date.

  • Disk encryption at rest
  • Backups isolated from the production server
  • SOC 2 certification
  • Read log

Last review: 2026-09-24

Security questions, vulnerability reports or audit requests: [email protected]