Compliance

Compliance posture.

Where we are today, where we are going. Public, current, no spin.

Today

• Per-tenant data isolation, audit logging, encryption in transit.
• Right-to-export and right-to-delete on request via /me/settings.
• Hosted on infrastructure that supports the GCC data-residency commitment.

Targeted

• SOC 2 Type II — audit in progress.
• ISO 27001 alignment.
• HIPAA / NCA controls for regulated customers on Enterprise plans.

We update this page when posture changes — not when marketing wants to.