Skip to content
Join the waitlist

Security architecture for governed AI delivery.

OIDC. SAML. SCIM. mTLS. CMK / HSM. Tamper-evident audit ledger. Policy-as-code enforced at every transition.

Trust overview Enterprise controls
Architecture · Security
  1. Identity: Identity · OIDC, SAML, SCIM, MFA, hardware token.
  2. Authorisation: Authorisation · RBAC + ABAC + policy-as-code.
  3. Data: Data boundaries · Tenant isolation with cryptographic guarantees.
  4. Secrets: Secret handling · CMK / HSM custody, short-lived tokens.
  5. Audit: Audit logging · Hash-pinned, tamper-evident, replayable ledger.
  6. Policy: Policy enforcement · Evaluated on every transition with breakglass paths.
Uptime
99.98%
Latency
14.2ms
Nodes
128/128

Across the architecture

  • 7 layers · open at every contract
  • mcp · openapi · gRPC · graphql
  • cloud · vpc · air-gap · same control plane
  • cmk / hsm · zero retention by default
  • anthropic · openai · oss · provider-neutral

What we secure.

Six surfaces, each with its own controls. Point at one to find its wall.

  • Identity

    OIDC, SAML, SCIM, MFA, hardware token.

  • Authorisation

    RBAC + ABAC + policy-as-code.

  • Data boundaries

    Tenant isolation with cryptographic guarantees.

  • Secret handling

    CMK / HSM custody, short-lived tokens.

  • Audit logging

    Hash-pinned, tamper-evident, replayable ledger.

  • Policy enforcement

    Evaluated on every transition with breakglass paths.

Tamper-evident audit ledger.

Audit logging: Hash-pinned, tamper-evident, replayable ledger. Policy enforcement: Evaluated on every transition with breakglass paths.

Each row carries the hash of the row before it. Change a written row and the next pin stops matching; replay the ledger and it stops exactly where the chain broke.

Mission audit ledger Sample
Sample audit ledger: each row's hash and the pin to the row before it
# Transition Policy-as-code Pin to previous Row hash
1 Intent → Build passed #00000000 #bae55db7
2 Build → Review passed #bae55db7 #74bec546
3 Review → Checks passed #74bec546 #f3b53e5e
4 Checks → Approval passed #f3b53e5e #ecf773c3
5 Approval → Release passed #ecf773c3 #e2724142

Five transitions, each hash-pinned to the one before it.

Start a Software Factory pilot.

Connect one repository, one ticketing tool, and one mission. See evidence in days, not quarters.

Book a pilot Join waitlist