Everything your legal team asks for, in one place.

Data Processing Agreement (DPA)

The template is public — read it here. We finalize and sign it with you before the engagement starts, never after.

Security brief

The threat model, key custody, and cryptographic guarantees are published — read the security page. In short: operator-held signing keys, an append-only signed log, and a published compromise playbook.

Procurement FAQ

• How do I pay? By bank transfer, against an invoice. No card needed.
• Who am I contracting with? A registered company. We share the entity name, registration, and signatory directly with your procurement team (kept off the public site).
• What's the engagement? The $5,000 two-week Trust Assessment, credited to the $12k/yr annual evidence program if you continue.
• Not a fit? You pay nothing. We'll tell you honestly on the first call.

Attestations

In progress: SOC 2 Type I and an independent penetration test of the audit layer. We say this plainly rather than imply otherwise, and this page updates the moment either lands.

GDPR & erasure

A locked record and the right to erasure can coexist — here's the honest explanation.