Trust

Security and compliance

What we can tell you today, and what is honestly still in progress. We would rather be specific about status than imply certifications we do not hold.

Synthetic data only

No real merchant bank statement, application or personal information enters this platform in any environment — including test fixtures and seed data. Every document path validates synthetic provenance and rejects anything else. The training files your team analyses are generated by us, with known anomalies planted deliberately.

This is a product constraint enforced in code, not a policy commitment. It means a breach of this platform cannot expose your merchants' financial records, because we never held them.

Status

Security and compliance artifact status
ArtifactStatus
Data Processing AgreementAvailable on request during procurement
Sub-processor listPublished before first enterprise contract
VPAT / WCAG 2.2 AAConformance built in; VPAT authored before first enterprise contract
SOC 2 Type IINot yet held. We will not imply otherwise.
Penetration testScheduled before general availability

Accessibility

We build to WCAG 2.2 Level AA as a requirement rather than a remediation phase: full keyboard operation, visible focus, semantic structure, no meaning carried by colour alone, and timing accommodations designed into proctored assessments rather than bolted on.

Records and audit

Credential issuance, revocation, grade changes and examination events are append-only, with actor, timestamp and reason, enforced at the database. Deactivating a person retains their training record — deleting it is the outcome a compliance officer buys this product to prevent.

On legal and regulatory content

Course material covering regulation is educational and is not legal advice. It is pinned to a jurisdiction and an effective date, reviewed by counsel before publication, and the review is recorded in the platform. Nothing here states current law as settled fact, and nothing here is a substitute for your own counsel.

Questions we have not answered here belong on the first call. Book a demo.