Trust Center ยท Compliance
Built for the jurisdictions you operate in.
Residency and oversight obligations differ by market. The controls below are applied per deployment rather than through a single global policy.
Regional coverage
Eight regulatory regions, each with the frameworks that apply and the controls that satisfy them.
European Union
Frameworks
EU AI Act (Reg. 2024/1689), GDPR (Reg. 2016/679), NIS2
Controls Applied
AI risk tiering, human oversight under Art. 14, Art. 17 erasure propagation across the graph
United States
Frameworks
NIST AI RMF 1.0, HIPAA Security Rule, CPRA / CCPA
Controls Applied
Govern / Map / Measure / Manage control mapping, PHI business-associate safeguards
India
Frameworks
DPDP Act 2023, CERT-In directives, RBI localisation
Controls Applied
In-country storage of financial and health data, six-hour incident reporting
Saudi Arabia
Frameworks
KSA PDPL (SDAIA), SAMA Cyber Security Framework
Controls Applied
Explicit consent for cross-border transfer, financial-sector control baseline
United Arab Emirates
Frameworks
UAE PDPL (Decree-Law 45/2021), DIFC and ADGM regulations
Controls Applied
Localisation for critical public data, DIFC / ADGM free-zone data regimes
Mainland China
Frameworks
PIPL, DSL, CSL and CAC AI regulations
Controls Applied
In-country processing, regulated cross-border transfer assessment
Hong Kong SAR
Frameworks
PDPO and sector guidance
Controls Applied
Consent management and cross-border transfer controls
Southeast Asia
Frameworks
ASEAN member-state data protection regimes
Controls Applied
Per-market residency and transfer controls
Standards alignment
These are control mappings, not certifications. The architecture implements the control areas each standard requires. Where a third-party audit has not yet completed, the row says so. We will not show a badge we have not earned. The current status of any line is available on request.
ISO/IEC 42001:2023
AI management system (AIMS)
Implementing Control
Data lineage tracking, algorithmic risk assessment, human oversight registers
ISO/IEC 27001:2022
Information security (ISMS)
Implementing Control
Network micro-segmentation, SPIFFE/SPIRE mTLS, static analysis in CI
ISO/IEC 27701:2019
Privacy information (PIMS)
Implementing Control
Workspace-level data isolation, automated PII tokenisation
SOC 2 Type II
Security, confidentiality, availability
Implementing Control
Continuous control monitoring across the platform
HIPAA Security Rule
Protected health information
Implementing Control
Format-preserving de-identification of medical records
FedRAMP / StateRAMP
Government and defence readiness
Implementing Control
FIPS 140-3 validated cryptographic modules, air-gapped deployment
EU AI Act
High-risk AI system conformity
Implementing Control
Human-in-the-loop kill-switches, full graph provenance
Last reviewed September 2026. Status changes as audits complete.