Applied-AI implementation / founder-ledOne workflow at a time
Discuss one workflow

Trust record / Security

Security requirements belong to the engagement that actually exists.

Controls are scoped to the workflow, data, providers, environment and current evidence rather than presented as universal certification.
← All trust records
Security posturereviewed 19 August 2026
Current posture
No blanket SOC 2, ISO 27001, HIPAA or equivalent third-party certification claim is made.
Applies to
The website or a specifically scoped engagement.
What this cannot conclude
That a method statement is an independent assurance report or that one engagement control applies universally.

Operating detail

Security is recorded through concrete decisions.

The fields below describe the current method. Engagement-specific evidence and terms still have to be produced for the workflow in question.
Control / 01Security

Access and ownership

Access design begins with the least permission needed for the agreed workflow and a named person accountable for each consequential action.

  • Named account and service ownership
  • Human release for consequential actions
  • Credential and environment boundaries documented before implementation
Control / 02Security

Engineering review

The risk changes with the workflow, provider, data and deployment model. Review therefore follows the actual architecture rather than a generic checklist.

  • Data-flow and dependency review
  • Acceptance proportional to change risk
  • Visible failure when required evidence is unavailable
Control / 03Security

Incident and change route

Notification, investigation and provider-change expectations belong in written engagement terms where the workflow requires them.

  • Named escalation contact
  • Change record for material dependencies
  • No universal response-time promise from the website

Evidence request

Ask for the evidence behind the statement.

A procurement or technical question should name the control, workflow and evidence requested. The answer should state the current fact and the uncovered gap.
Security question recorddirect founder response
Question
The exact control, policy or evidence requested.
Applies to
The named workflow, system and engagement.
Response
Current fact, available evidence and any gap.
What this cannot conclude
That one scoped response covers another workflow, provider, environment or contract.

Send one precise trust question.

Discuss one workflow