The whole map,
on one page.
Every control, every boundary and every roadmap item on one page. Your security team gets the complete picture in ten minutes, and the full pack the same day.
100%
Tenant isolation coverage
Enforced at the data layer, outside application code.
12
Detection rules documented
Mapped to recognised techniques, with the analyst response beside each.
Time-boxed
Personal-data access
Declared with a purpose, and expiring on its own.
72h
Breach notification
With everything we know at the time, fixed in the agreement.
What is in place, and where
Access
- Tenant isolation enforced at the data layer
- Tenant filter applied again in every query
- Four-role model with per-role redaction
- Purpose-based access with automatic expiry
- Activity-derived access recertification
- Single sign-on (SAML / OIDC)Enterprise and above
Data
- Encryption in transit and at rest
- Point-in-time recovery
- Configurable retention, job-enforced
- Full corpus export in open formats, any time
- Regional data residencyEnterprise and above
- Customer-managed model keysDedicated
Detection
- Twelve documented detection rules with analyst guidance
- Seven bounded, reversible active defenders
- Trace-ID reconstruction of any request
- Immutable audit written at the data layer
- Prompt-injection monitoring with evidence samples
- 24/7 managed SOCOn the roadmap
Assurance
- Documented threat model and six-layer map
- Twenty-one item control inventory with evidence
- Incident runbook, in the product
- Annual penetration test, shared in fullDedicated
- Customer-run penetration testing permittedEnterprise and above
- SOC 2 Type IIAudit in progress
Your side of the line
A boundary with sharp edges is one your security team can actually rely on. These sit with you, and we say so in the procurement meeting, on the record, up front.
Your console accounts
We enforce roles and log every access. Single sign-on on Enterprise and above puts account lifecycle where it belongs, with your identity provider.
The lawful basis for collecting
You are the controller. We flag any taxonomy line that reaches further than it should, before go-live, every time.
Your legal pages
We draft them, your legal contact reviews and owns them, and that review gates go-live.
What you do with a finding
Yves delivers the analysis, the evidence and the recommended first step. Your leadership makes the call and owns it.
Endpoints and networks you control
Everything from your browser inward sits with your team.
The questions procurement always reaches
Each one has a page of its own, written for the person who has to sign it off rather than for the person selling to them.
Everything a procurement team asks for
The security questionnaire, pre-answered
Send us your questionnaire.
Fully answered, same day, with the complete pack attached and zero paperwork first.