Review each document’s publication status and access requirements. Certification status is reported separately. Customer-specific and security-sensitive materials require scope and approval review.
Inventory reviewed: 29 August 2026
Certification and assurance status Dated status, target, scope, and available review material for each assurance program. No certification is presented as complete unless it is held.
Scope Iftah organization and governed platform
Owner Security and compliance
Last reviewed 21 August 2026 View public summary Architecture security Public control overview covering network isolation, encryption, identity, policy enforcement, and audit controls. Deployment-specific detail is scoped for review.
Scope Reference deployment patterns
Owner Platform security
Evidence state Public summary View public summary Data-flow and trust boundaries Sanitized topology showing control-plane metadata and customer-contained prompt, file, vector, and model paths.
Scope Customer cloud, private cloud, on-premises, and air-gap patterns
Owner Platform architecture
Evidence state Public summary View public summary Encryption responsibility model Public summary of encryption in transit and at rest, including the customer-owned identity and key control domain.
Scope Platform and customer deployment environment
Owner Platform security
Evidence state Public summary View public summary Identity and access management SSO, RBAC, customer identity-provider, and default-deny authorization overview. Configuration detail is deployment-specific.
Scope Human, application, and agent access
Owner Platform security
Evidence state Public summary View public summary Logging and audit evidence Public description of decision, access, deployment, and operational evidence. Sample packages require workload and retention scoping.
Scope Governance and deployment audit events
Owner Platform operations
Evidence state Scoped request Request scoped review Vulnerability management A publishable policy summary and gated testing evidence are being prepared for security and legal approval.
Scope Product and delivery lifecycle
Owner Product security
Evidence state Roadmap Not yet published
Privacy Read the public privacy policy and review contractual privacy materials and deployment-specific processing terms during procurement.
Scope Website and commercial engagement
Owner Legal and privacy
Evidence state Public summary View public summary Subprocessors A public list and change-notification process require legal and delivery approval before publication.
Scope Website, commercial, and delivery services
Owner Legal and delivery
Evidence state Roadmap Not yet published
Availability and service status Public service definitions, status reports, and incident history are not yet available.
Scope Contracted service by deployment model
Owner Service operations
Evidence state Roadmap Not yet published
Responsible disclosure A public reporting policy and security contact workflow require security and legal approval before publication.
Scope Public product security reports
Owner Product security and legal
Evidence state Roadmap Not yet published
Regulatory control mappings Scope regulatory control mapping to your jurisdiction, sector, and deployment. Confirm the available materials during your review.
Scope Customer jurisdiction and deployment
Owner Security and compliance
Evidence state Scoped request Request scoped review