Trust center
What we commit to, in writing, before you sign anything
The pages your security, legal and procurement teams will ask for, kept in one place and dated. If a question is not answered here, send it and we will answer it before the commercial conversation.
| Commitment | What it covers | How you get evidence |
|---|---|---|
| Security and data governance | How systems are built and run, what the models may and may not decide, audit trails, and what we do not claim. | Page is public. Questionnaires answered before the commercial conversation. |
| Responsible AI policy | Where a person stays in the loop, what data models may see, and how decisions are logged and reversed. | Page is public. Applied to every program through the statement of work. |
| Sub-processors | Every third party that touches data on this website, and how sub-processors are handled inside client programs. | Page is public and dated. Changes are recorded on the page. |
| Vendor onboarding and procurement | Legal entity details, the documents we provide on request, how we respond to an RFP, and how invoicing works. | Page is public. W-9, certificate of insurance and agreements on request. |
| Accessibility | The standard this site targets, how it is tested, and how to report a barrier. | Page is public. Audit results reproducible with public tools. |
| Vulnerability disclosure | How to report a security issue in this site or in a program we operate, and what we do with the report. | Machine-readable at /.well-known/security.txt (RFC 9116). |
| Privacy | What this website collects, why, and for how long. | Page is public. Data protection agreements signed per program. |
How a review usually goes
Three questions, answered in this order
Can you pass our vendor review?
Usually yes, and we would rather find out early. Send the questionnaire first; the answers cost you nothing and tell you whether to spend time on the commercial side.
Who is accountable when the system decides something?
A named person on your side, by design. The responsible AI policy sets where people stay in the loop and how any automated decision is logged and reversed.
What happens to our data?
Programs are built in your cloud and your repositories. The sub-processor list covers this website; each program's list is an annex to its data processing agreement.