Public Trust Center
Trust is built into every action.
One front door to Zurvina's public security architecture, privacy notice, governance status, availability service and authorized evidence-request paths.
Trust directory
Find the right disclosure path.
Every area shows what is available now. A readiness program is not represented as certification, and a preview notice is not presented as a final policy.
Security Overview
Architecture principles, Zero Trust boundaries and evidence-safe control disclosures. Target controls are not presented as production certification.
Review pathAI Governance
Bounded tools, evidence, policy/risk checks, approval gates, payload binding, provider verification and reviewable execution patterns.
Review pathHuman Approval
P0–P4 risk tiers define when preparation may proceed and when an authorized human or dual approval is required.
Review pathPrivacy
Current early-access privacy notice and route to data questions.
Review pathData Protection
Classification, minimization, retention, redaction, export controls and deletion/crypto-erasure are architecture-defined controls still validated per environment.
Review pathTenant Isolation
RLS, tenant-scoped data paths, connector binding and cross-tenant tests are target controls. Current multi-tenant production isolation is not claimed by this page.
Review pathEncryption
HTTPS/TLS, encryption at rest, field/application encryption and managed-key hierarchy are architecture requirements; platform-wide deployment proof remains environment-specific.
Review pathIdentity & Access
MFA, least privilege, RBAC/ABAC, separation of duties, strong re-authentication and Enterprise SSO/SCIM readiness are architecture controls, not a blanket live-availability claim.
Review pathAudit & Evidence
Consequential work is designed to preserve tenant/action/correlation context, approval decisions and provider verification. Production immutability is validated separately.
Review pathBusiness Continuity
Continuity ownership, controlled recovery and environment-specific operating procedures form a readiness program.
Review pathDisaster Recovery
Encrypted backups, restore drills, independent recovery paths and ransomware playbooks are target controls; no universal RPO/RTO is promised here.
Review pathIncident Response
Readiness model for detection, containment, session/connector quarantine, key/secret rotation, evidence preservation, recovery, notification and remediation.
Review pathResponsible Disclosure
Use the governed contact channel to report a suspected security issue.
Review pathSubprocessors
A verified public subprocessor list is not yet available during early access.
Review pathCompliance Status
Certification and regulated-industry claims remain evidence-gated. Request the current environment-specific status rather than inferring compliance from architecture.
Review pathSystem Status
Open the separately operated public availability service.
Review pathEvidence Request
Request authorized review of available, environment-specific security and compliance evidence.
Review pathTrust FAQ
Security architecture FAQ explains certification, managed-key readiness, AI action controls and evidence-request boundaries.
Review pathProgram status
Evidence decides the label.
These labels state the current public position only. Scope, audit period and deployment evidence must be reviewed separately.
- Security assurance program
- In progress
- SOC 2
- Not yet certified
- ISO/IEC 27001
- Not yet certified
- HIPAA / regulated healthcare
- No compliance claim; regulated-gated
- PCI DSS / regulated payments
- No certification claim; contract/evidence required
Subprocessor disclosure
Not yet published.
A verified public list is not available during early access. Do not infer vendors, processing locations or contractual coverage from product diagrams.
Due-diligence status is published on the subprocessor disclosure page, and an environment-specific data processing addendum is available for review by request.
Ask a subprocessor questionAuthorized evidence
Need a compliance or security review?
Request the evidence that is available for the relevant environment and agreement. Sensitive material is never exposed from this public page.