What we can be held to, and what we cannot.

What we do not have

• We hold no third-party security certification, and none is in progress.

  ✓ VERIFIED · 2026-07-27

• We do not offer single sign-on.

  ✓ VERIFIED · 2026-07-27

• We do not offer an uptime commitment.

  ✓ VERIFIED · 2026-07-27

• We do not yet publish a process for reporting a security flaw to us.

  ✓ VERIFIED · 2026-07-27

What we can show you

• Before anything reaches production we verify it. We verify before we approve, and verification has blocked releases — including a hosting tier whose licence prohibited commercial use.

  ✓ VERIFIED · 2026-08-04

• Architecture decisions are recorded with their reasoning at the time they are made.

  ✓ VERIFIED · 2026-07-27

How we use AI

• Our written material is drafted with AI assistance and reviewed by a person before publication.

  ✓ VERIFIED · 2026-07-27

• We integrate no third-party AI model provider in the product today.

  ✓ VERIFIED · 2026-07-27

• Where a decision is not ours to automate, a person makes it.

  ✓ VERIFIED · 2026-07-27

This statement is withheld until its verification completes. The gap is deliberate.