Customer-controlled environment, credential handling, tamper-evident audit chain, internal test evidence—and what is not yet claimed.
Facts, not badges.
Dated, not evergreen.
Deployment scope, engineering evidence and assurance status, gathered in one place—each claim carries a status, and nothing here substitutes for your own procurement review.
WHERE TO LOOKFour pages.
Four pages.
One control story.
Every capability claim labelled Available now, In progress or Planned. SOC 2 and ISO 27001 are planned, not held.
Access control plus the check access-control platforms cannot see.
What a reviewer can examine for one specific agent answer: source, owner, change event, impact.
Do not infer certifications
not listed in a signed agreement.
Company Brain can provide deployment scope, data-flow discussion, support targets and implementation boundaries for your assessment. Contracted service levels and bespoke security commitments are separately scoped.
See security & deployment →