Security & Trust

Your data.
Always yours.

We protect your compensation records with deterministic architecture and enterprise-grade controls.

Deterministic Auditable T-1
Architecture · AI Boundary

No AI sits in the calculation path.

Zero neural networks, zero trainable parameters, zero ML models inside the engine. AI operates only above the Deterministic Boundary: it interprets and maps; the engine calculates.

0
ML models in the engine
0
AI trained on your data
100%
deterministic results
10
audit states
Data Protection

Encrypted in transit, at rest, and per tenant.

01

TLS 1.3 in transit

All client-server communication encrypted with TLS 1.3.

02

AES-256 at rest

AES-256 symmetric encryption across the storage layer.

03

Tenant isolation

Row-Level Security enforced at the database. Zero raw data shared between tenants.

04

Immutable logs

Audit events are append-only; they cannot be edited or deleted.

05

Data residency

Mexico region. Your data does not leave the country.

Identity & Audit

Least privilege, full trail.

  • 01
    MFA for administrators
    Multi-factor authentication required for elevated roles.
  • 02
    RBAC with 5 roles
    Role-based access control with least-privilege by default.
  • 03
    Full audit trail
    Who changed what, when, and from where — immutable and exportable.
  • 04
    Separation of duties
    Configurers don't approve; approvers don't execute. Enforced by the engine.
  • 05
    Contractual guarantees
    Security, confidentiality and data-handling commitments written into the contract.
Compliance

Frameworks we apply.

01

LFPDPPP

Mexico-first. Aligned with the Federal Law on Protection of Personal Data Held by Private Parties.

02

Cloudflare WAF

Application firewall, DDoS protection, and TLS at the edge.

03

SLA 99.9%+

High availability with a 99.9% or higher availability target.

04

SOC 2 CC6 · OWASP · NIST 800-63B

Controls aligned with reference frameworks for access, authentication and identity management.

You don't have to trust it on paper.

In the Guided Proof of Value we run a real period with your data. Every discrepancy traces through the five layers to the source transaction.

Book your Guided Proof of Value →