Security
Infrastructure buyers verify. We make that easy.
Public Trust Center, status page, control maps, and an admin audit feed. No fake certification badges.
Security & compliance
Trust is inspectable — not asserted.
Honest posture: controls and evidence first. Certification when attestation exists. Security reviews start at the Trust Center.
- SOC 2
- Controls mapped
- GDPR
- DSAR + DPA path
- SLA target
- 99.9%
- Auth
- RBAC API keys
Controls
What security reviews usually ask.
- Authentication
- API keys hashed at rest; Bearer / X-Api-Key; optional OAuth client credentials.
- Authorization
- Per-route RBAC roles including search, evaluate, webhooks, and admin.
- Integrity
- Webhook HMAC-SHA256 over raw body; structured error codes without stack traces.
- Monitoring
- Immutable OpsAuditLog, module health, alerts, public reliability metrics.
Prove search lift this week.
Free scorecard for marketplace CTOs. Automatic report. Shareable dashboard for your exec team. Purchase when the numbers hold.
Offline — we’ll get back to you