Trust
What is in place, what we align to, and what is still planned.
We would rather show you an honest status than a badge we have not earned.
In place, every engagement
- Your data stays in your environment. We work inside your controlled environment, on the data you make available.
- Guardrails in the contract. Written into the agreement we both sign, before delivery starts.
- Gate sign-off. A documented go or no-go at every gate, and an acceptance sign-off at handover.
Aligned practices
- NIST AI Risk Management Framework
- ISO/IEC 42001
- EU AI Act readiness
Aligned means we follow the practices. It does not mean certified.
Planned
- SOC 2 On our roadmap. No report or badge yet.
We never guarantee a compliance outcome. We commit to targets and process.
Who processes data for us
Our subprocessors, listed.
| Service | What for | Data involved |
|---|---|---|
| Cloudflare | Serves this website | Standard server logs |
| Resend | Delivers the contact form and the ten questions | Name, email, and whatever you wrote |
| Cal.com | Books scoping calls | Name, email, chosen time |
| Microsoft | Hosts the calendar and the call | Name, email, chosen time |