Security & compliance

Encryption, data residency, air-gap options, access control, and the audit trail.

Last updated — 2026-08

Encryption everywhere

Data is encrypted in transit (TLS 1.2+) and protected at rest. Sessions use HttpOnly cookies, scoped and never logged.

Data residency

Your data stays in the region you choose. For regulated work we deploy inside your jurisdiction — or entirely inside your walls.

Air-gapped delivery

The full platform runs offline: local models, file-based storage, zero external calls. Built for classified and disconnected environments.

Access control

Role-based access with least privilege. Internal economics and delivery plans are visible only to authorized operators — never to visitors or clients.

Audit trail

Every privileged action — approvals, edits, payments — is recorded with actor and timestamp, exportable for your compliance reviews.

Responsible disclosure

Found a vulnerability? Report it through the contact form marked “security” — we acknowledge within 24 hours and credit verified reports.