Security

Security: what we can say, and what we cannot.

Boundary

The gate on this page

We do not yet publish a process for reporting a security flaw to us. Until we do, we are not going to make security claims on this page.

Verified · CL-33

Evidence

What is true today

01

We hold no third-party security certification, and none is in progress.

Verified · CL-20
02

What we can show you is our verification record: we verify before we approve, and verification has blocked releases before anything reached production.

Verified · CL-10

This statement is withheld until its verification completes. The gap is deliberate.

Limits

Where this page stops

We describe our posture here, not our architecture. Detailed infrastructure information is not something we publish.

Security review before deployment

We share what exists and name what does not.