01
Database enforcement
Tenant isolation
Tenant isolation is enforced in the database, not only in application code.
Trust and security
Controls you can inspect.
Verified product controls and current assurance work, stated plainly in one place.
Verified product controls
How the operating record is protected.
These controls describe current product behaviour.
02
Attribution
Capturer identity required
A record will not save without the capturer's identity.
03
Record integrity
Tamper-evident change events
The audit trail records that a value changed without storing the value itself.
04
Offline records
Both versions retained
Records sync when signal returns. If two technicians edit the same record offline, both versions are kept and the second person is told.
05
Corrections
Reversals, not silent edits
Corrections are recorded as reversing rows; the original row is not edited.
Current assurance status
Roadmap, not certification claims.
We separate current product controls from assurance work that is still ahead.
SOC 2
On our roadmap.
ISO 27001
On our roadmap.
Penetration test
Not yet complete.