Answers to the questions buyers and evaluators ask.
Ten categories. Forty questions. Specific, not promotional.
- Ask: What does "governed" mean in practice?
- Gate: Approvals at named gates
- Evidence: Signed evidence packs
- Ledger: Hash-pinned audit ledger
- Replay: Replayable agent decisions
Frequently asked questions.
Search every question and answer, or pick a category.
34 questions in 10 categories.
No question matches that search.
01 · Product scope
Is this a coding assistant?
No. EngynOS governs the full software delivery lifecycle. Coding is one capability among requirements, planning, QA, release readiness, observability, insights, and governance.
Do I have to replace my existing tools?
No. EngynNexus connects to GitHub, Jira, Slack, Datadog, AWS, Azure, GCP, and 240+ others. The platform orchestrates across what you have.
Can I start with one workflow?
Yes — pilots usually start with release readiness or QA automation.
What does "governed" mean in practice?
Approvals at named gates, signed evidence packs, hash-pinned audit ledger, replayable agent decisions.
02 · AI agents
Which AI models do you use?
Anthropic Claude, OpenAI, and OSS models. Per-mission routing with provider fallback. You can pin versions or restrict to OSS-only.
Can I bring my own model?
Yes — any provider with an OpenAI-compatible or Anthropic-compatible endpoint.
How do agents stay in scope?
Mission scope is policy-as-code; agents cannot edit files, call tools, or access data outside the declared scope.
Are agent decisions explainable?
Yes — every prompt, retrieval, and tool call is hash-pinned in the ledger and replayable.
03 · Security
Is EngynOS SOC 2 certified?
SOC 2 Type II and ISO 27001 certified. NIST AI RMF aligned.
How is data protected?
CMK / HSM key custody, tenant isolation with cryptographic boundaries, zero retention by default, regional residency.
Can we deploy air-gapped?
Yes — private/air-gapped mode with OSS-only model routing.
How are breakglass actions handled?
Logged separately, require exec attestation, and surface in the audit export.
04 · Data control
Where does our data live?
In the region you select. Residency enforced at the platform layer.
Do you train on our data?
No.
Can we set retention?
Yes — per-tenant retention windows with regional purge.
Can we redact PII before prompts?
Yes — built-in redaction with custom policies.
05 · Integrations
What does Nexus connect to?
GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Linear, Slack, Teams, Datadog, Grafana, Sentry, AWS, Azure, GCP, Okta, Entra ID, and 200+ others.
What protocols are supported?
MCP, OpenAPI 3.1, gRPC, GraphQL, webhooks.
Can we build our own connector?
Yes — connector SDK with MCP-first patterns.
06 · QA + testing
What test types are covered?
Unit, integration, contract, E2E (Playwright), accessibility, visual regression, performance.
Do you support BDD?
Yes — Given/When/Then linked to acceptance criteria.
How do you handle flaky tests?
Cluster + classify on failure. Diff-aware suite selection reduces flake exposure.
Can we keep our existing test runners?
Yes — EngynQA orchestrates across your existing runners.
07 · Deployment
What hosting modes do you offer?
Managed cloud (EU/US/APAC), customer cloud (your VPC), private/air-gapped.
Same features across modes?
Same control plane. Some integrations require outbound connectivity (flagged per adapter).
How long to deploy?
Managed cloud: under 30 minutes to first mission. VPC: typically 1-2 days.
08 · Pilot Access
How is pilot access structured?
Three tiers (Builder / Scale / Sovereign). Tiers gate concurrency, governance depth, and deployment surface.
Are model costs included?
You can bring your own provider key (no markup) or use our pooled rates.
Volume discounts?
Yes — Scale and Sovereign include negotiated rates.
09 · Migration
How do I migrate from a single-agent tool?
Run them side-by-side during pilot. Cut over once your team is on the factory.
Will existing PRs and tickets carry over?
Yes — Nexus mirrors existing state.
10 · Enterprise governance
Is RBAC supported?
Yes — RBAC + ABAC + policy-as-code.
How is audit handled across BUs?
Federated audit with cross-tenant exports for org-level evidence.
What compliance frameworks are supported?
SOC 2, ISO 27001, NIST AI RMF, HIPAA, GDPR, EU AI Act, DORA, CCPA, APP.
Start a Software Factory pilot.
- One repository
- One ticketing tool
- One mission
Connect one repository, one ticketing tool, and one mission. See evidence in days, not quarters.