Governance · security
Governance & security
Sovereignty perimeter, compliance posture, access control, and audit trail.
Sovereignty perimeter enforced
CCA v2.4.1 · last audit 4h ago · 0 cross-perimeter calls in last 24h
Compliance score
Controls passing
Open findings
Active users
Compliance posture
All governance controls grouped by category
Sovereignty
3/3 passCCA perimeter integrity
0 cross-perimeter calls in 24h · enforced at gateway
Data residency enforcement
us-east-1 · me-dubai-1 · 100% policy match
Sovereign key custody
HSM-backed · per-region root keys · no cross-region wrap
Access
2/3 passRole-based access control
5 role tiers · 1,847 users · least-privilege baseline
SSO enforcement
Okta · 100% workforce coverage · MFA required
Service account rotation
3 keys older than 90d · auto-rotate scheduled 2026-05-02
Encryption
3/3 passEncryption at rest
AES-256 · all stores · per-tenant DEKs
Encryption in transit
TLS 1.3 · mTLS on east-west · cert chain verified
PII redaction pipeline
98.4K/hr scanned · 4,200 redactions in 24h · 0 leak signal
Audit
3/3 passAudit log retention
90-day hot · 7-year cold · WORM storage · 0 gaps
Admin action logging
4,212 admin events in 30d · 100% signed
Model access events
2.14B inference events logged · sampled 1:1000 to long-term
Compliance
4/5 passSOC 2 Type II
Trust services criteria · annual audit · 0 findings
ISO 27001
ISMS in scope · surveillance audit complete
UAE AI Office alignment
Sovereign deployment registry · me-dubai-1 attested
SDAIA AI principles
Pending KSA region attestation · scheduled 2026-Q3
GDPR data subject rights
DSAR pipeline · avg 4-day fulfillment · 0 backlog
Sovereignty topology
Where data is stored, processed, and where inference runs
Detroit HQ
us-east-1
Primary inference + storage
Dubai DSO
me-dubai-1
Sovereign · MENA
Cross-perimeter calls (24h)
0
Data residency match
100%
Sovereign keys in custody
2 / 2
Audit trail
Recent admin actions, access events, and policy changes