Security controls, described honestly.
No certifications, audits or attestations are claimed on this page. Security documentation is being expanded as Sanclarity moves toward production enterprise deployment.
Permissions separated by view, run, publish and export, mapped to team and mandate.
Identity handling is designed for an external provider to be attached; no provider is connected in this build.
Corpora and analysis are scoped to a workspace, with information barriers where mandates require separation.
Analyses carry who ran them, when, and against which source version.
Every conclusion retains the document and location it was derived from, which is itself a control.
Planned: scoped service-account credentials with per-key limits. API access is not released.
Membership, sharing and publication rights administered per workspace.
Review, dependency hygiene and least-privilege as engineering practice.
Sanclarity does not claim SOC 2, ISO 27001, PCI DSS or GDPR certification, and does not claim independent audits or penetration tests. When any of those are completed, they will be published here with evidence.
Request Security Documentation