Security
Security is a feature, not a PDF.
How we're different
- Ops-first, not checks-first.
- Policy-gated actions with human approvals.
- Evidence binders by default.
Trust rule: AI drafts; humans decide for sensitive outcomes.
Security layers
Data: encryption at rest + in transit
Access: RBAC + least privilege
Actions: approval gates
Audit: immutable logs + retention
Controls
- Encryption at rest and in transit
- Role-based access control
- Immutable audit logs
- PII redaction in logs
- Retention policies + environment isolation
Compliance posture aligned with SOC 2 controls (hypothetical roadmap).