18Implemented controls
Trust Center
Trust should be
auditable, not implied.
Current control status for enterprise procurement. Implemented controls are separated from partial or planned controls. SOC 2 and ISO 27001 are not claimed as certifications.
1Partial controls
5Planned controls
7Compliance artifacts tracked
Control registry
Organization usage meteringImplementedSearch, API, report and AI Analyst usage is metered by organization.
Per-key rate limit and monthly quotaImplementedHashed API keys enforce scopes, per-minute rate limits and monthly quotas.
Private report artifact isolationImplementedPrivate reports are stored outside the public webroot and served only after organization authorization.
Restricted CORSImplementedProduction origins restricted.
Same-origin mutation protectionImplementedCookie-authenticated mutations require same-origin proof; API-key clients use bearer authorization.
Sensitive dotfile blockingImplementedHidden files are blocked from public access.
Automated enterprise SaaS end-to-end homologationImplementedDisposable-tenant E2E checks validate MFA, API access, private reports, SCIM, audit boundaries and cleanup.
ISO/IEC 27001PlannedNot certified.
Independent penetration testPlannedIndependent external test not yet completed.
SOC 2 Type IIPlannedNot certified.
Subscription billing providerPartialBilling ledger and Stripe integration code are implemented; live Stripe credentials and prices are not configured.
Webhook idempotency ledgerImplementedExternal billing events are deduplicated by provider and event ID before processing.
DATA10 normalization-to-quality chainImplementedEvery scheduled DATA10 Core normalization is followed by an objective quality-gate run.
Multi-factor authenticationImplementedTOTP MFA with encrypted secrets and one-time recovery codes is implemented and enforced at login.
OIDC enterprise SSOPlannedPlanned; not claimed as available.
Organization/workspace RBACImplementedOrganization/workspace role-based access control is enforced by the Enterprise SaaS API.
SAML 2.0 enterprise SSOPlannedPlanned; not claimed as available.
SCIM provisioningImplementedOrganization-scoped SCIM 2.0 user and group provisioning with dedicated hashed bearer tokens is implemented.
TLS and HSTSImplementedHTTPS enforced with HSTS.
Automated service-level monitoringImplementedPublic site, public API and Enterprise API are measured every 15 minutes for status and latency.
Database restore drillImplementedProduction/restore critical counts compared successfully.
Encrypted transport backup to R2 with checksumImplementedDaily database backup with remote checksum verification.
Environment-only application secretsImplementedNo literal DB password/DSN findings in active Python code.
Operational freshness gatesImplementedAutomated checks cover backup age, DATA10 quality/freshness, World Bank freshness, report queues and SaaS homologation freshness.
What is already evidenced
Restricted CORS, hidden-file blocking, environment-only application secrets, daily R2 database backup with remote checksum validation, and restore-drill evidence are implemented controls.
What remains external
Independent penetration testing, SOC 2 Type II and ISO/IEC 27001 remain planned. They are procurement workstreams, not current certifications.
Request security review →