Current controls and limitations
Review our security controls and their limits.
This page lists current controls alongside certifications and guarantees that NAIF has not claimed.
Delivery evidence
0delivered jobs
0delivery passports
Certification posture
SOC 2: Not certified
ISO 27001: Not certified
Independent pentest: Not claimed
Technical controls are not a substitute for independent certification.
Current controls
Security overview
HTTPS, per-job access tokens, constrained executors and explicit heavy-work handoff.
Retention
Enterprise jobs can select bounded artifact retention. Purges are recorded while non-secret delivery evidence may remain.
Incident response
Operational incidents are recorded in a public-safe ledger and exposed on the status page.
Legal readiness
MSA and DPA materials are drafts only until legal review. They are not presented as signed agreements.