No theater. Here's exactly where your data goes.
Most vendor trust pages are a wall of badges. This one is a map of the boundary, a list of enforced controls, and a plain statement of what we are not yet.
Your pod. Your keys. Your account.
Every deployment is a single-tenant pod in your VPC or on a dedicated instance. The only egress is the Anthropic API — on your Anthropic account, under your DPA, with your keys.
No phone-home. No shared multi-tenant store. No third-party analytics we ship.
This site sits behind Cloudflare, which injects its own privacy-first analytics beacon at the edge. That is the only third-party script on the domain, and it's on this website — not in your pod.
What's actually enforced, not just written down
Approval gates
Irreversible and production actions always escalate to a human; the gate list is versioned in the governance corpus.
Proof-gated closure
A defect cannot reach "verified" without a passing test plus evidence — enforced by database triggers, not policy documents.
Secret hygiene
Credentials live in one owner-only store; repo/index-level scanning refuses to index credential files; leaked means rotated, no exceptions.
Backup-before-write
Every durable file gets a timestamped backup before modification.
Daily regression
The full smoke/regression suite runs every morning; failures auto-file defects.
Spend caps
Every LLM call routes through a metered gateway with per-pod budget caps and per-call cost attribution.
Decision logs
Agent work ships with a first-person decision log — the parameters chosen and why.
SOC 2 / ISO 27001
We are pre-customer-one and we say so. The control list above is what we already enforce on ourselves; certification is scheduled with the first enterprise deployment that requires it.
Ask us this on the call — we'd rather lose a deal than fake a badge.
Built and governed by AP Agency
Built and governed by AP Agency (apagency.ca), Ontario, Canada. Founder-led. The engineer you talk to on the booking call is the person accountable for the system.
Even the marketing page is governed
- StackSingle static HTML, no framework, no trackers shipped by us.
- HeadersSecurity headers (CSP, HSTS, nosniff, frame, referrer, permissions) live on every page — verify with any header scanner.
- 404 pageThe 404 page is honest too.
Found something?
Security disclosures: [email protected] — read within one business day.
Book a call