Hosting posture
Hosted on cloud infrastructure selected for reliability, auditability, and African-region deployment options.
The posture buyers ask for before trust is earned.
A practical review of ASIRI security, data handling, access control, incident response, and evidence boundaries for procurement and security teams.
Procurement proof
Review the operating evidence before the meeting.
Trust Assurance Pack
Evidence-backed answers for procurement review.
Trust Assurance Pack
The Trust Assurance Pack is evidence-backed readiness material for buyer, counsel, auditor, DPCO, and QSA review. It is not a certificate, attestation, or regulator approval, and it should not be presented as an external compliance outcome.
View Trust Assurance PackSecurity architecture
Hosting, tenancy, encryption, access control, logging, backup, and incident-response posture for security review.
Privacy operations
NDPA workflow ownership, DSR handling, retention, breach support, and transfer-safeguard documentation.
Sub-processors
Vendor purpose, region, Customer Data exposure boundary, review cadence, and change-notice process.
AI governance
Source-linked, human-reviewed decision-support boundaries; not legal advice or a regulator decision.
PCI boundary
Payment processor responsibility split and raw-cardholder-data handling restrictions for scoped review.
External audit roadmap
ISO 27001 and SOC 2 readiness status, evidence owners, open gaps, and external validation boundaries.
Review areas
What the first procurement pass should answer.
Encryption
TLS in transit and encrypted storage at rest for tenant data and uploaded evidence.
Access control
Role-based access, tenant membership, SSO/SCIM surfaces, MFA support, and audit-linked staff actions.
Tenant isolation
Tenant-scoped data access, server-side active tenant checks, and audit visibility across sensitive operations.
Subprocessors
Subprocessor posture, DPA workflows, and buyer-facing disclosure through trust and policy surfaces.
Incident response
Incident handling aligned to privacy obligations, breach workflow evidence, and post-incident review.
People controls
Access review, personnel readiness, offboarding, and workforce compliance surfaces in the product.
Evidence review
Evidence freshness, exports, reports, auditor workspace, and Trust Center publication patterns.
Screens
Evidence and assurance surfaces procurement can inspect.
Procurement FAQ
The questions that decide the next call.
Can procurement inspect ASIRI before a call?
Yes. Start with the product tour, Trust Center demo, and this procurement posture page. Deep architecture and implementation review happen in guided procurement sessions.
Does ASIRI claim SOC 2 or ISO certification for customers?
No. ASIRI supports readiness and evidence workflows. Independent certifications remain issued by qualified auditors or certification bodies.
How does ASIRI handle intelligence-assisted output?
Publicly, ASIRI frames this as regulatory and evidence intelligence. Outputs remain source-linked, reviewable, and subject to human approval before external use.
Can enterprise buyers request gated artifacts?
Yes. Security packs, DPAs, architecture notes, and customer-specific evidence are shared through controlled procurement and Trust Center workflows.