Skip to content
Zeta-Reticuli AIZeta-Reticuli AIZeta-Reticuli AI

Trust center

We hold no certification or authorization. We do not claim FedRAMP, GovRAMP, CMMC, HIPAA, PCI DSS, SOC 2, or ISO 27001 status. Mapping our controls to these standards is in progress.

What is built (self-reported, evidence in Git)

Section titled “What is built (self-reported, evidence in Git)”
  • Talos lab clusters with Secure Boot and TPM-sealed disks (LUKS2), no inbound port and no public node address, destroyed and recreated from code. The lab uses a software TPM, so disk sealing is real but attestation is only as good as the host; customer clusters are planned on hardware or cloud TPMs.
  • Secrets store on YubiKeys.
  • Operator access only through Cloudflare WARP.
  • Controls kept as code, with evidence meant to be produced by jobs, not by hand.

Known gaps

Section titled “Known gaps”
  • FIPS 140-3 validated modules are required at the high end; our Secure Boot keys and secrets store are not validated.
  • Evidence collection jobs are planned, not complete.

Sub-processors and security contact

Section titled “Sub-processors and security contact”

Sub-processors: Cloudflare (hosting, tunnels, WARP) and Google Workspace (corporate mail). A customer-facing list will be published before any customer data is processed. Security contact: see Contact.