Trust center
Security
Controls that support evidence integrity and exam readiness.
How we're different
- Evidence is deterministic; narratives cite evidence IDs.
- Supervisor gates are enforced by policy.
- Audit exports include integrity proof (hash chain).
Trust rule: AI drafts, humans decide for sensitive outcomes.
Controls snapshot
Encryption
- Encryption in transit (TLS)
- Encryption at rest (environment-dependent)
- Credential storage via environment secrets
Access controls
- Role-based access (investigator/supervisor/admin)
- Case-level review gates
- Audit logs for actions and exports
Evidence integrity
- Server-side hashing for evidence objects
- Provenance metadata (source type + reference)
- Optional WORM/immutable storage (roadmap)
Audit integrity
- Append-only audit events
- Hash chaining across events
- Verification endpoint for exports
Downloads
Mock documents for internal procurement readiness.