Enterprise trust
You get hash-backed SOC 2 Type II, an external pentest, a signed customer-code threat model, the sandbox red-team result, DPA and subprocessors, SSO/SCIM and BYOK posture, reliability proof, signed benchmark scorecards, and auditor/CISO acceptance — in a scoped, expiring evidence room.
SOC 2 Type II, external pentest, and auditor/CISO acceptance are released under NDA in the scoped, expiring evidence room.Evidence roomProtected · Jun 2026Auditor acceptance letter: Available under scoped, expiring access, dated Jun 2026.
RepresentativeRepresentative end-state trust data. The attestation digests, red-team results, and procurement artifacts below illustrate the signed surface and are replaced by the live, re-verifiable feed and scoped evidence room before procurement review.
Every slot is a real artifact, not a promise. Public artifacts link directly; sensitive artifacts (SOC 2 Type II report, full pentest, auditor and CISO acceptance) are released under NDA inside the scoped evidence room below. Nothing here is a fabricated download.
SOC 2 Type II
Protected. Available under scoped, expiring access. Available under scoped, expiring access.Representative — not yet established
Independent auditor report on the security, availability, and confidentiality controls over the platform.
Open in evidence roomProtected · 2026-06-18Auditor acceptance letter: Available under scoped, expiring access, dated 2026-06-18.External pentest
Protected. Available under scoped, expiring access. Available under scoped, expiring access.Representative — not yet established
Third-party penetration test of the platform and sandbox boundary with remediation status for each finding.
Open in evidence roomProtected · 2026-06-12Security document: Available under scoped, expiring access, dated 2026-06-12.Signed threat model
Signed. KMS/Sigstore signed and re-verifiable.The threat model for executing untrusted customer code, signed and bound to the attested sandbox image digest.
Inspect artifactSigned · 2026-06-20Trust-boundary attestation: KMS/Sigstore signed and re-verifiable, dated 2026-06-20.Sandbox red-team summary
Signed. KMS/Sigstore signed and re-verifiable.External red-team pass against the attested image digest: 0 critical escapes across the isolation battery.
Inspect artifactSigned · 2026-06-20Trust-boundary attestation: KMS/Sigstore signed and re-verifiable, dated 2026-06-20.Auditor acceptance letter
Protected. Available under scoped, expiring access. Available under scoped, expiring access.Representative — not yet established
Independent auditor acceptance of Boetica evidence packets as audit-ready, tamper-evident, and re-verifiable, released under NDA inside the scoped evidence room.
Open in evidence roomProtected · 2026-06-25Auditor acceptance letter: Available under scoped, expiring access, dated 2026-06-25.CISO acceptance
Protected. Available under scoped, expiring access. Available under scoped, expiring access.Representative — not yet established
CISO acceptance of the trust boundary and evidence model (company withheld until approved), recorded inside the scoped evidence room.
Open in evidence roomProtected · 2026-06-25Auditor acceptance letter: Available under scoped, expiring access, dated 2026-06-25.Benchmark scorecards
Signed. KMS/Sigstore signed and re-verifiable.Create, Continue, Remediate, and trust-boundary scorecards — each dated, signed, and re-verifiable from its hash trail.
Inspect artifactSigned · 2026-06-24Signed scorecard: KMS/Sigstore signed and re-verifiable, dated 2026-06-24.DPA
Protected. Available under scoped, expiring access.DPA baseline covering processing scope, security measures, subprocessors, and deletion workflows.
Inspect artifactProtected · 2026-06-10Security document: Available under scoped, expiring access, dated 2026-06-10.Subprocessors
Protected. Available under scoped, expiring access.Current subprocessors for hosting, CRM, email, and durable backup, with the processing purpose for each.
Inspect artifactProtected · 2026-06-10Security document: Available under scoped, expiring access, dated 2026-06-10.Identity, data, key management, and provider terms alongside the reliability signals your security review checks before approval.
You review protected artifacts inside a scoped, expiring, verifier-backed room — with a per-viewer watermark, a full access audit trail, and the auditor and CISO acceptance decisions recorded inside it.
Scoped evidence room
Acceptance
Procurement export
Public artifacts (signed threat model, red-team summary, benchmark scorecards, DPA, subprocessors) are linked directly. The sensitive artifacts (SOC 2 Type II report, full pentest, and auditor/CISO acceptance letters) are released under NDA inside a scoped, expiring evidence room you can request from this page.
Every packet is hash-chained, KMS-signed, logged to a Sigstore transparency bundle, and re-runnable by a verifier with no access to the generating run. The packets meet an independent auditor's audit-ready bar, and the auditor acceptance letter is released in the evidence room.
Yes — SAML SSO, SCIM provisioning, enforced MFA for privileged access, and a customer-managed-key (BYOK) option for evidence storage, alongside tenant export, retention, and deletion controls.
No — they are linked. Each superiority claim ties to a signed scorecard, and each scorecard ties to the same trust-boundary attestation in the evidence room, so the proof chain is one continuous, re-verifiable artifact set rather than separate marketing assertions.
Only with written customer approval. The CISO acceptance is recorded in the evidence room with the company withheld until approved, and we never fabricate or imply a logo or quote.
Start the review
Request a time-boxed, audit-logged room with exactly the artifacts your review needs, or see how the commercial model works first.
