Current security and privacy posture.
ConformOS is designed with tenant-aware access control, audit trails, operational monitoring, and documented security and privacy controls.
Current posture
Readiness program in progress
ConformOS is not independently certified against SOC 2 or ISO 27001. Control documentation and evidence processes are being developed; certification will not be claimed before an independent audit is complete.
Independent certification
Not independently certified
Privacy program
Policy published
Standards coverage
ISO 21384-3 & SORA v2.5
Service stage
Limited early access
Controls
Current control areas
Access control
Role-based permissions and tenant-scoped access are core design controls. Privileged-access review procedures are part of readiness work.
Audit readiness
Audit logging and evidence capture support operational review. Independent audit readiness remains in progress.
Data protection
Tenant boundaries, storage safeguards, scoped service access, retention procedures, and privacy-request workflows are documented control areas.
Reliability
Monitoring, alerting, recovery procedures, and incident response are maintained as operational control areas.
Data boundaries
Shared controls are managed at the platform layer.
ConformOS uses shared identity, service authorization, audit, and observability capabilities. Product-specific services keep drone operator audit records within those shared boundaries.
Read security practicesEvidence cadence
Readiness evidence cadence
These are target review intervals for the readiness program, not evidence of a completed independent audit.
SLO windows, alert reviews, vendor changes, vulnerability scan status
Access reviews, risk register review, restore verification, vendor reassessment
Policy approval, security training, BCP/DR tabletop, ISO gap review
Sub-processors
Named service providers
Every vendor below is confirmed from ConformOS source or configuration. AI inference runs on-premises through Furistic's own gateway, so no external AI vendor processes customer content. No other sub-processor is currently confirmed for ConformOS.
| Vendor | Purpose | Data processed |
|---|---|---|
| Cloudflare | Hosting and serving this public ConformOS marketing site (Cloudflare Workers) | Static site assets and HTTP requests to this website; customer audit data is not served from this site |
Security
Security architecture and incident reporting.
Privacy
Privacy commitments and user data rights.
Availability
Early-access status and how to register interest.
Terms
Service terms and acceptable use.