Security & Compliance Roadmap
The state of our certifications, audits, and trust-center milestones. We publish a date only when an engagement is booked.
Last updated: 2026-10-09
Roadmap items
ISO/IEC 27001:2022 certification
PlannedNo certification audit is booked yet. This page changes when an audit with an accredited body is booked.
SOC 2 Type I
PlannedCovers the SaaS platform and the license server.
Third-party penetration test
PlannedGrey-box engagement on the SaaS platform, portal, and API. No engagement is booked yet.
Coordinated disclosure platform
PlannedAn EU-based coordinated disclosure platform. Until then, researchers can reach us directly via the Responsible Disclosure policy.
Public status history page
Done30-day uptime history with per-service bars and incident log. See the status page.
DPIA support pack
PlannedA description of the processing, the data categories, the security measures and the sub-processors, to help customers complete their own data protection impact assessment (GDPR Art. 28(3)(f)). The assessment itself is the customer's, as the controller.
Signed SBOM pipeline
PlannedA CycloneDX SBOM is generated for every release. Detached signatures, SPDX output and a public download archive are planned.
Want the details?
Need a document that is not on the trust center? Email [email protected]. We aim to reply within two business days and tell you whether it exists.