Your book stays yours.
Where the data lives, who can read it, and the real status of each measure.
Built, and tested on every change.
Built means in the client application and covered by its automated tests.
- Magic links, TOTP code mandatory on accounts that see moneybuilt
- Isolation per house, administrators see no client bookbuilt
- TLS in transit, sensitive fields encrypted at rest, separate keysbuilt
- Backups encrypted, restore testedbuilt
- Security headers, CSRF protection, rate limits, size-limited importsbuilt
- Audit log on every write, journal append-only, hash-chainedbuilt
- Sanctions screening at sign-up, blocked countries refusedbuilt
Still to build.
Each one has a date it must exist by, and none is promised sooner.
- Web application firewallbefore first client
- Secrets manager, two people for production accessbefore first client
- Privacy policy, terms, data processing agreement, incident planbefore first client
- External penetration testbefore a national oil company
- ISO 27001 or SOC 2not yet
In our cloud, or inside your walls.
One workspace per house in our cloud, or your own data centre for national oil companies.
Never.
Nobody buys your book from us and no client data reaches a model without written consent.
- No other client ever sees a line of yourstested on every change
- Quote pooling anonymised, leave it any timeopt-in
Start on your own book.
One trading week on your own book, with no card and no call.