Trust centre
A public-safe readiness overview without unsupported certification claims.
What can currently be evidenced
- Version-controlled source for the website and legal centre.
- A fail-closed readiness gate that does not enable the commercial flow when approvals are missing.
- Source-code foundations for account export and deletion.
- A privacy manifest and permission descriptions in the iOS project.
- An internal CSA STAR runbook and CAIQ draft without public answers.
What cannot yet be claimed
- CSA certification or a completed STAR Level 1 registry entry.
- An approved DPIA, ROPA, DPA, SCCs, TIA or production subprocessor register.
- An independent penetration test, restoration test, accessibility audit or verified on-call process.
- A production EU region, approved retention periods or complete end-to-end deletion.
CSA STAR
STAR Level 1 is a public self-assessment, not an independent certification. A registry link, scope and renewal date will be shown only after the answers have been approved, the public version has passed security and editorial review, management has signed off, and the submission has actually been made.