Trust Center
Public trust signals for an early governance vendor.
Faultline is designed for teams that expect scrutiny. This page collects the public security, legal, procurement, and status materials available before a formal enterprise review.
Current posture
No source upload required by default.
Public materials are intentionally conservative: no invented certifications, customer logos, or incident-prevention claims.
Procurement signals
What a reviewer can inspect now.
Security posture
Metadata-only ingestion by default, OIDC/RBAC, PostgreSQL RLS, rate limits, encrypted integration secrets, and signed evidence exports.
Certification status
No formal certification is claimed on this site. SOC 2 Type II is planned and will be updated here when in progress.
DPA readiness
A procurement overview is public. Enterprise DPA review is available for teams moving from pilot to paid contract.
Customer proof
Public logos and case studies are not claimed until customer references are approved.
Data boundary
Faultline OSS scans locally and Enterprise ingests source-free metadata snapshots. Source code, file contents, secrets, environment variables, and arbitrary command output are not uploaded by the scanner.
Security contact
Security review requests and vulnerability reports can be sent to security@gofaultline.dev.
Trust links