Trust
Trust Center
Operational status, security posture, and compliance direction in one place — maintained by NWARRAH Engineering.
Production status
Our production services are actively monitored. Incidents, if any, are handled per our incident response process.
Security practices
- Encryption in transit and at rest.
- Role-based access control and least privilege.
- Row-level security enforced at the database.
- Secrets kept out of source control and the client bundle.
- Error and infrastructure monitoring with alerting.
See the full Security page for details, including responsible disclosure.
Infrastructure
We run on managed, reputable cloud infrastructure with isolated development, staging, and production environments, provisioned as code.
Compliance roadmap
| Area | Status |
|---|---|
| SOC 2-aligned practices | In place |
| Formal SOC 2 audit | On roadmap |
| DPA availability | On request |
| GDPR-aligned handling | In place |
Not a certification
This page is maintained by NWARRAH to answer common security and privacy questions. It reflects current controls and is not an independent audit or certification.
Trust documents
- Privacy Policy — what we collect and why.
- Security — infrastructure, encryption, and disclosure.
- Responsible AI Policy — human oversight and data isolation.
- Data Processing Agreement — processor terms, available on request.
Frequently asked
Questions about this document? Reach us at our contact page.
Let's build something that compounds.
Tell us about your product, systems or automation goals. We'll map a path forward.