Trust centre

Everything your vendor assessment asks for.

One page, because the alternative was four and two of them unlinked. It includes what we do not hold — a trust page listing only the good news is a marketing page with a padlock on it.

Fresh deployment evidence

AWS target-representative run: PASS. 117,290 verifications, 0 performance errors, 19.47 ms p95, AWS KMS-backed signing and 51.5 second controlled recovery with 0 lost acknowledgements.

This closes the target-environment measurement gap; it does not claim production customer validation, certification or a Well-Architected review. See the full measurement record → Download the standalone verifier →

What we do not hold

Listed with the same prominence as everything else. If any of these is a hard requirement for you, you should find out now rather than at contract stage.

SOC 2 Type II NOT HELD No audit has been performed. We will not imply otherwise in a questionnaire.
ISO 27001 NOT HELD No certification exists.
Independent penetration test NOT DONE A scope brief is written and ready to commission. Our own adversarial testing found real defects, which shows the discipline works and shows nothing about what an outsider would find.
Data processing agreement OUTLINE ONLY Drafted as an engineering position and NOT legally reviewed. Two points need counsel first: the deletion clause, because an append-only evidence chain cannot delete in the ordinary sense; and the security warranty, because we hold no certifications.
Service level agreement NONE PUBLISHED No production deployment or pilot has run, so no availability, latency or correctness figure has been measured. Indicators are instrumented; objectives will be set from design-partner data rather than chosen to look reassuring.
Cyber insurance certificate ASK US Not published here. Request it and we will tell you what is in force.

Why this page exists in this shape. We audited the site as ten different evaluators. The vendor security assessor — the gate every enterprise deal passes through — was the worst served: seven questions, no single page covering more than three, four pages to visit and two of them not in the navigation. That is an expensive failure precisely because it stays invisible until a deal stalls.

Next · Talk to EcoKure Discuss a pilot