A security page that reads as complete is the one nobody trusts.
| Control | Status | Evidence |
|---|---|---|
| AI governance | ||
| Agents propose; none decides or writes a number | in place | A test reads the source |
| AI clients get only the scopes a person granted | in place | Every call logged, never its content |
| Work leaves only under a person's name | in place | Dispatch requires an authoriser |
| Customer text cannot address an agent | in place | Flattened before any brief |
| Nothing is sent to a customer for you | in place | Drafts only; a person sends |
| Tenancy and access | ||
| Every query names the tenant; no tool takes one | in place | One resolver for app, agents and MCP |
| Operator access is a membership you can remove | in place | Listed in your security log |
| Approved domains, invitations, roles | in place | One invitation per domain |
| SSO through your identity provider | planned | Google sign-in today |
| Data | ||
| Credentials sealed at rest | in place | AES-256-GCM, never rendered back |
| A Jira connection may hold names only | in place | Narrowing clears what was stored |
| No request reaches an internal address | in place | On every redirect too |
| Export of every register | planned | Goals export today |
| Record and assurance | ||
| Security log append-only at the database | in place | Delete refused by trigger |
| Every decision kept with its reasoning | in place | And every field it changed |
| Content security policy, per-request nonce | in place | No inline script without it |
| A dedicated instance in your AWS | planned | Decided; the image already builds |
| SOC 2 Type II for OutcomeFactory | planned | Not yet audited. TeamForm is. |
Enter your email address to read OutcomeFactory.
Invited addresses get instant access
Already have a workspace? Log in