Trust Center

Security, compliance, and privacy posture for Mindaeon Foundry. Download standard documents below. Artifacts that contain auditor-confidential detail are available after a click-through NDA.

Last updated: April 15, 2026

Compliance & certifications

  • SOC 2 Type II

    Report available under NDA

    Independent auditor — Security, Availability, Confidentiality.

  • CAIQ v4

    Public

    CSA STAR Consensus Assessments Initiative Questionnaire.

  • ISO 27001

    Roadmap — 2027

    Gap analysis underway; certification targeted post-Series A.

  • GDPR / CCPA

    Aligned

    DPA + SCCs available. Data subject rights honoured within 30 days.

Documents

Loading documents…

Subprocessors

Current third-party subprocessors.
SubprocessorPurposeRegion

Get notified of subprocessor changes

We email only when subprocessors change (typically quarterly). Unsubscribe any time.

Data residency

Supported data residency regions for Mindaeon Foundry.
RegionPosture
United StatesDefault jurisdictional placement on Cloudflare D1 + R2.
European UnionRegional binding via Cloudflare Jurisdictional Placement (Data Location: EU).
Asia-PacificRegional binding available on request; default edge placement otherwise.

Vulnerability disclosure

Report security issues to security@mindaeon.com. Our machine-readable contact file lives at /.well-known/security.txt. We acknowledge valid reports within 2 business days and strive to triage within 5.