certifiedClaim = false

How this workgroup is secured — and what we will not pretend.

Answers mapped to the real system boundary. Not a SOC 2 report. Not a HIPAA BAA. Not ISO 27001. Inventing a letter is a breach of our own appendix.

Open the full packet

In place

Tenant fence + TLS on this origin

One paid SKU is one tenant. Traffic to veloce.tuce.app is TLS. Browser /tools never upload the file.

In place

Customer-held VERIFY

SHOW DIGEST and SHOW INCLUSION export two JSON files. Recompute the path in /tools/verify. That is not QLDB and not Raft.

Refused

Letters we do not hold

SOC 2 Type II, HIPAA BAA, FedRAMP, FIPS 140-3 Level 3 HSM, 24/7 SOC, CREST letter. Pause the Order instead of ticking the box. See Trust.

The packet is the questionnaire map. It is not a Type I observation window. SAST in CI is the pipeline we implement; a green badge on this origin is refused.