Hands In
Sign inTrust Center
Live control status comes from continuous monitoring; nothing here claims an attestation that has not been completed.
Compliance Programs
4
0 attested
Controls Passing
0 / 9
0 failing
Automated Evidence
78%
7 controls collected automatically
Compliance programs
- HIPAA (Business Associate path for programs module): planned
- ISO/IEC 27001: planned
- PCI DSS SAQ A scope: in progress
- SOC 2 Type II: in progress
Controls
| Control | Automated | Last result | Collected |
|---|---|---|---|
| AC-01 Access reviews | Manual | not yet collected | — |
| BC-01 Restore rehearsal | Manual | not yet collected | — |
| DB-01 Tenant isolation enforced in the database | Yes | not yet collected | — |
| DB-02 Restricted service roles | Yes | not yet collected | — |
| DB-03 Ledger integrity | Yes | not yet collected | — |
| DB-04 Usage metering integrity | Yes | not yet collected | — |
| DB-05 Audit append-only | Yes | not yet collected | — |
| KEY-01 Tenant key hygiene | Yes | not yet collected | — |
| VM-01 Vulnerability management | Yes | not yet collected | — |
Subprocessors
Published when production providers are contracted.
Documents
SOC 2 report and penetration test summaries are published here after completion.