What a compliance review needs, in one place.

Inspect the review record.

• Illustrative separate-vendor review record · available now. A synthetic AI-generated advisory answer is reviewed through evidence, fiduciary, risk, and alternatives lenses across three model vendors other than the declared source vendor. The sample preserves flag-form findings, the human disposition and written basis for each finding, the final human decision, reviewer attestation, timestamp, model provenance, and an inline SHA-256 fingerprint limitation. It contains no client data and is printable to PDF. Open the sample record. Check a record.
• Product workbench · available now. Inspect the source input, attributed findings, human dispositions, and the completed record in the current product surface: /review/disposition.

“Independent” here means the review comes from model vendors separate from the source; it is not third-party independent assurance, which is not yet obtained.

Regulatory and methodology materials.

• Regulatory mapping · available now. Each regulatory pressure, what the record captures for it, and what Teranode does not claim: /methodology, the map.
• Model-pin methodology and decision rules · available now. Which model is pinned to each role, the evals behind each pin, and the rules for shipping a pin change: /methodology.
• Evaluation method and its limits · available now. The internal evaluation, stated with its limitations (founder-designed sample, single rater, small n, internal only, not predictive): /methodology, eval limits.
• Third-party review of the record format · not yet obtained. We are seeking an independent compliance-attorney or compliance-consultant review of the artifact structure. Until it exists, no page here claims one. We expect to link it here once obtained.

Privacy, security, and vendors.

• The data path, end to end · available now. Every hop a scenario travels and the two opt-in exceptions: /privacy, the data path.
• Privacy posture · available now. What is and is not persisted, vendor retention terms, deletion process: /privacy.
• Security posture · available now. Controls, encryption, incident response, and SOC 2 status stated plainly (planned, not yet engaged): /security.
• Sub-processor table · available now. Each vendor, its role, and the data it sees: /trust.

On request and in preparation.

• Security questionnaire (SIG-Lite style) · on request. Completed for firms in active vendor review. Email founders@teranode.ai.
• Vendor DDQ standard responses · in preparation. A standing question-by-question DDQ document is being finalized; until then the security questionnaire above covers the same ground on request.
• Implementation checklist · in preparation. The step-by-step adoption path for a pilot firm (access, supervision touchpoints, filing workflow).
• DPA · executed as part of a pilot engagement. Approach described on /security.