Trust center
The Nebbos Trust Center consolidates references relevant to security and compliance review. Content on each linked page is derived from the substrate; framework status and platform commitments update in place as they change.
Reference documents
Five data tiers, four governance pillars, six compliance frameworks. Enforcement mechanisms documented at the substrate level.
Security modelSOC 2, ISO 27001, EU AI Act, HIPAA, FERPA, GDPR/CCPA — current framework status.
Compliance postureEvery read, every write, every tier decision — verifiable end-to-end from the exported bundle.
The audit chainContinuous export exercise; five-section bundle; independently-verifiable receipt.
Portability & exportOperational commitments
99.9% Team / 99.95% Enterprise. Four severity classes, response commitments, tiered service credits.
Service level agreementDetection cadence, communication commitment, blameless postmortem within seven days.
Incident responseLive status board, current incidents, 90-day rolling uptime by surface.
System statusFour platform commitments and six prohibited operations enforced at the substrate.
Responsible AIData handling
Third parties that process operator data on Nebbos’s behalf, with change-notification process.
Subprocessor listPer-tier RPO/RTO objectives, backup rotation, resilience testing cadence.
Business continuity & disaster recoveryDatabase-enforced isolation. Queries against unauthorised scopes are refused prior to answer composition.
Row-level isolationPrograms and policies
Reporting path for authorised security researchers, response commitments, disclosure timeline.
Vulnerability disclosureVoluntary Product Accessibility Template against WCAG 2.2 AA and Section 508.
Accessibility (VPAT)Document requests
Requests for SOC 2 progress statements, ISO 27001 substrate-controls attestations, EU AI Act Annex IV current-state packs, HIPAA readiness statements, GDPR DPA execution copies, insurance certificates, or completed vendor security questionnaires: enterprise@nebbos.ai. Available under NDA.