Question 1

Are you SOC 2 or ISO 42001 certified today?

Accepted Answer

No. We are in active readiness for SOC 2 Type II and ISO/IEC 42001, which means we are building and documenting the controls against those standards rather than claiming a certificate we do not hold. We will say plainly when each one is achieved. We will not imply it before then.

Question 2

Where does our data live when you build for us?

Accepted Answer

By default, inside your environment. We design for customer VPCs, customer-owned cloud accounts, and scoped integrations so your data and runtime stay in your perimeter. Where a component is ours to host, we tell you exactly what it holds and for how long.

Question 3

Do you use our data to train models?

Accepted Answer

No. Data you share for an engagement is used for that engagement. We do not repurpose client data into shared or general-purpose model training.

Question 4

Can we review the architecture and controls before we commit?

Accepted Answer

Yes. That is the point of this page. Request our controls brief and we will walk your security, legal, and engineering reviewers through system boundaries, data movement, approval paths, and the controls that matter for your workflow.

Question 5

What happens to access and data when an engagement ends?

Accepted Answer

Engagement-scoped access is removed and working data is cleaned up on a defined timeline. We do not keep standing credentials into systems we no longer support, and the system ships with the runbooks your team needs to own it.

Question 6

Which AI providers and platforms do you build on?

Accepted Answer

We are platform-agnostic and build on the major clouds and model providers, chosen per workload. Any third-party service that processes data in a system we deliver is named for you and governed by the same handling rules as the rest of the build.

Trust Center