Security Stance Summary
This summary describes the control environment of the platform as operated for enterprise Clients. It is provided for security review and procurement evaluation.
Client Data Ownership
Client retains full ownership of tenant data.
Control Boundaries
Platform provides classification, attribution, and reporting infrastructure; it does not perform statutory accounting or custody functions.
Change Management
Structural changes are versioned; historical data is preserved.
Authentication
OIDC and SAML 2.0 via a professional third-party identity provider.
Authorization
Tenant-scoped, role-based and object-level access controls enforced within the platform.
Least Privilege
Services and operators have access limited to required scope only.
Encryption in Transit
TLS for all external and internal communications.
Encryption at Rest
Tenant data encrypted using industry-standard mechanisms.
Data Residency
Tenant-selected hosting region enforced at the infrastructure level.
No Undeclared Replication
Data does not move across regions without explicit configuration.
Stateless Services
Application layer designed for horizontal scaling and replacement.
Fault Isolation
Failures in non-critical services do not compromise core data access.
Authorization Resilience
Authorization state remains consistent during IdP outages.
Change Traceability
Contract, attribution, and classification changes are historically traceable.
No Silent Mutation
The platform does not auto-adjust, rebalance, or normalize data.
Deterministic Computation
Outputs are reproducible from stored inputs.
Identity Provider
Enterprise-grade third-party provider for SSO and federation.
Infrastructure
Cloud-based infrastructure with region-specific deployment.
Dependency Review
External services are limited to necessary operational functions.