Control evidence
Threat models, access reviews, migration checks, backup restore, incident exercises, dependency and secret scans, accessibility evidence, provider readiness, and release verification are indexed by version.
Trust centre
Capability status, evidence, providers, incidents, and limitations belong in one place.
Trust claims remain dated, attributable, and reviewable. An engineering objective is never presented as measured production performance.
Subprocessors
A provider is listed with purpose, data categories, processing region where known, contract state, transfer basis where applicable, and the activation date before production use.
Incident communication
The status surface separates investigation, identified cause, mitigation, monitoring, and resolution with timestamps and affected capability—without speculation.