TRUST-CENTER
Resilience and sovereignty index.
Compliance and certifications
CaliaLabs designs its architectures to natively meet regulatory requirements for financial and institutional environments.
The frameworks listed below are subject to ongoing alignment and certification efforts, integrated from the design phase of our systems.
- SOC 2 Type Iplanned (Q1 2026)
- SOC 2 Type IIplanned (Q2 2026)
- ISO/IEC 27001planned (Q2 2026)
- DORA readinessaligned
- GDPRnative
- HSTS Preloadactive
Public Documentation
Legal documents and institutional information accessible to all.
Privacy Policy
Cookie Policy
Terms of Use
Terms of Sale
Legal Notice
Acceptable Use Policy (AUP)
Security Best Practices
Accessibility Statement
Complaints & Mediation Procedure
Compliance Roadmap & Updates
Sub-Processors List
Whistleblowing Policy
Service Level Agreement (SLA)
Data Processing Agreement (DPA)
Secured Documentation
Controlled access to sensitive documentation. Viewing subject to verification and traceability.
Compliance Documentation
Regulatory and contractual documents for compliance, security, and audit teams.
DORA & NIS2 Addendum
Master Services Agreement (Term Sheet)
GDPR Processing Records
Data Retention Policy
Security Architecture Whitepaper
Penetration Test Report
Disaster Recovery Plan (DRP)
Bug Bounty Program
Internal Governance Policies
Technical Documentation
Architecture and security documentation. Access subject to validation and enhanced confidentiality.
Volume I: System Architecture
Volume II: Security & Compliance
Volume III: Semantic Engineering
WORM (immutable) logging: every access generates a cryptographic proof. Classified documents are dynamically watermarked with the reader's identity.
Environments & Interfaces
Visual access to CEREBRO consoles. Each environment corresponds to a distinct operational role with hierarchical authority levels.
Infrastructure Supervision Console
Systemic integrity management: WORM immutability control, sovereign key management (BYOK) and resilience monitoring.
Super-Governance Console
Holistic exposure view: aggregated analyst performance monitoring, final arbitration (Overrides) and critical escalation management.
Operational Execution Console
Assigned flow processing: ex-ante validation, individual statistics tracking and escalation protocol activation to governance.
Ephemeral session (48h). Dynamic watermark enabled. Each consultation is logged and timestamped. Screenshots detectable.
Extended access subject to identity verification and, where applicable, a confidentiality agreement.
Contact Security Team