Security & Trust

Your data.
Always yours.

We protect your compensation records with deterministic architecture and enterprise-grade controls.

Deterministic Auditable T-1

Architecture · AI Boundary

AI layer

Interprets · maps · flags anomalies

Deterministic boundary

Engine

Calculates · 0 ML models · 100% reproducible

Architecture · AI Boundary

No AI sits in the calculation path.

Zero neural networks, zero trainable parameters, zero ML models inside the engine. AI operates only above the Deterministic Boundary: it interprets and maps; the engine calculates.

ML models in the engine

AI trained on your data

100%

deterministic results

audit states

Data Protection

Encrypted in transit, at rest, and per tenant.

TLS 1.3 in transit

All client-server communication encrypted with TLS 1.3.

AES-256 at rest

AES-256 symmetric encryption across the storage layer.

Tenant isolation

Row-Level Security enforced at the database. Zero raw data shared between tenants.

Immutable logs

Audit events are append-only; they cannot be edited or deleted.

Data residency

Mexico region. Your data does not leave the country.

Identity & Audit

Least privilege, full trail.

01
MFA for administrators
Multi-factor authentication required for elevated roles.
02
RBAC with 5 roles
Role-based access control with least-privilege by default.
03
Full audit trail
Who changed what, when, and from where · immutable and exportable.
04
Separation of duties
Configurers don't approve; approvers don't execute. Enforced by the engine.
05
Contractual guarantees
Security, confidentiality and data-handling commitments written into the contract.

Compliance

Frameworks we apply.

LFPDPPP

Mexico-first. Aligned with the Federal Law on Protection of Personal Data Held by Private Parties.

Cloudflare WAF

Application firewall, DDoS protection, and TLS at the edge.

SLA 99.9%+

High availability with a 99.9% or higher availability target.

SOC 2 CC6 · OWASP · NIST 800-63B

Controls aligned with reference frameworks for access, authentication and identity management.

You don't have to trust it on paper.

In the Guided Proof of Value we run a real period with your data. Every discrepancy traces through the five layers to the source transaction.

Book your Guided Proof of Value →

Precision that defends itself.