Security

Trust starts before data moves.

The first qualification step is designed to avoid sensitive uploads. Deeper evidence handling requires a scoped process, retention agreement and controlled transfer path.

Qualification intake

The website form is for qualification only. Prospects should not paste production logs, secrets, credentials, regulated datasets or personal data dumps.

Use descriptions, masked examples, schemas or synthetic samples for the first step.

Evidence processing

  • Scope the boundary before requesting data.
  • Prefer read-only exports and masked samples.
  • Separate measured evidence from derived and modelled values.
  • Produce replayable artifacts where possible.

Retention

Retention is agreed before any sensitive transfer. Sample website artifacts are synthetic and public. Customer materials require explicit handling terms.

Baseline controls

AreaApproach
Web formNo sensitive uploads requested.
EvidenceScoped transfer and hashing.
OutputCertificate, ledger, manifest and memo.
ReviewHuman qualification before deeper processing.