The material a security and procurement review asks for.The material a security and procurement review asks for.

Trust boundaries, key roles and what each component can and cannot reach.

Test evidence, what it demonstrates, and the independent assurance not yet held.

How to report a security issue, and what to expect.

Threat model and invariants register

Formal threat model, invariants with falsification tests, attack trees, metadata exposure budget.

Cross-implementation test vectors

Golden vectors and the independently implemented internal verifier, for reproduction by an evaluator.

One platform, four components, one authority model.

Managed and Sovereign postures, and what changes between them.

How an evaluation is scoped, run and concluded.

The vocabulary this platform uses, in plain English.

Sovereign Inc., a Delaware corporation. Commercial agreements are executed by the legal entity.

What this website collects, why, and for how long.

Terms governing use of this website.

Export and regulatory position

Export classification is under specialist review. No classification is asserted here.