Trust Center · hub centralizado

Trust Center

40+ documentos transparentes para procurement Enterprise · seguridad · compliance · operations · status · enterprise features. Todo público · todo auditable · honest disclosures + known gaps incluidos. NO marketing fluff.

Reservar demo

Seguridad overview

Compliance roadmap

🛡️ Seguridad

Seguridad overview

Cifrado AES-256 · TLS 1.3 · pgsodium · arquitectura defense-in-depth

/security

Encryption key management

6 key types · pgsodium per-tenant · 6 rotation triggers · escrow Shamir 3-of-5

/encryption-key-management

Access control policy

RBAC 6 roles · permissions matrix 8 resources · 6 procedures · audit logging

/access-control-policy

Penetration testing policy

Cadencia anual + post-cambio · vendor criteria · findings history transparente

/penetration-testing-policy

Webhook signing strategy

6 webhooks HMAC-SHA256 · replay protection · idempotency · 8-step rotation

/webhook-signing-strategy

Rate limiting strategy

6 limit tiers · 4 algorithms · 8 response format rules · 6 degradation patterns

/rate-limiting-strategy

Security disclosures + Hall of Fame

Responsible disclosure policy · hall of fame contributors

/security-disclosures

Multi-tenant architecture

6 isolation layers · RLS + pgsodium · 8 attack scenarios · 6 testing regimens

/multi-tenant-architecture

RLS policies detalle

Postgres RLS · 6 principles · 6 policy examples · 6 testing · 6 failure modes

/rls-policies-detalle

📜 Compliance

Compliance roadmap

GDPR · AEPD · NIS2 · AI Act · ISO 27001 · SOC2 timeline 2026-2027

/compliance-roadmap

Subprocesadores

Lista completa vendors + DPA status + jurisdicción + scope

/subprocesadores

Vendor risk management

8 criterios scoring · 8 vendors evaluación pública · 8 exit plans

/vendor-risk-management

Data retention policy

Per-data-type retention periods · legal requirements healthcare · automated cleanup

/data-retention-policy

Data residency policy

EU data residency default · Schrems II considerations · BYOK roadmap Enterprise

/data-residency-policy

Data export policy

GDPR Art 20 portability · client-self-export · format JSON/CSV · 30d retention link

/data-export-policy

Audit logs export

Per-tenant audit log export · compliance evidence · immutable

/audit-logs-export

Privacidad

Política privacidad GDPR + LOPDGDD compliant · paciente derechos detalle

/privacidad

WCAG checklist (38 criteria)

Accesibilidad web checklist · WCAG 2.1 AA compliance progress

/wcag-checklist-detalle

⚙️ Operations

SLA público

Service Level Agreement · 99.5%+ uptime · response time + handoff SLA · credits

/sla

Uptime history

Histórico uptime · transparencia incidentes · monthly aggregated

/uptime-history

Metodología uptime

Cómo medimos uptime · synthetic monitoring · honest exclusions

/metodologia-uptime

Incident postmortems

Postmortems públicos publicados · 8-section template · 5 Whys root cause

/incident-postmortems

Postmortem template

Template re-usable 8 secciones · ejemplo timeline real · 6 principles

/incident-postmortems-template

Runbooks ops públicos

Runbooks operacionales públicos · transparente · re-usable industria

/runbooks-publicos

Disaster recovery plan

RTO 4h · RPO 1h · 8 escenarios · 5 testing cadence · single-founder disclosure

/disaster-recovery-plan

Business continuity plan

BIA 8 procesos · MTPD · workforce continuity · 8-fase activation · 5 testing

/business-continuity-plan

Backup + restore policy

5 backup layers · 8 restore scenarios · 6 testing schedules · integrity verification

/backup-restore-policy

Change management policy

4 risk tiers · approval matrix 10 escenarios · 6 deploy windows · CAB post-tracción

/change-management-policy

API versioning policy

Semver strict · 12m deprecation notice · 24m sunset · migration support

/api-versioning-policy

Observability strategy

3 pillars · 4 alert tiers · 6 privacy rules · 6 cost guards quantified

/observability-strategy

Performance budgets

8 latency budgets p50/p95/p99 · 6 resource budgets · regression detection

/performance-budgets-public

Cost optimization strategy

8 cost components · 6 per-tenant economics · 6 guardrails · 5 scale projections

/cost-optimization-strategy

📊 Status + Architecture

Status page

Real-time status servicios · current uptime · ongoing incidents

/status

Architecture overview

Stack técnico completo · diagrams · vendor matrix

/architecture-overview

ADRs surfaced (43+)

Architecture Decision Records publicados · context + decisions + tradeoffs

/changelog-arquitectura

Changelog producto

Product changelog · releases · features · bug fixes timeline

/changelog

Real-time metrics dashboard

Sample dashboard 12 KPIs operativos · transparent ops

/metricas-real-time-dashboard

Benchmarks públicos

Sector benchmarks transparentes · sources cited · methodology

/benchmarks-publicos

🏢 Enterprise

Enterprise/DSO solution

Solution DSOs + cadenas · 6 features · 4 pricing tiers · 5 onboarding phases

/dso

SSO SAML config

Enterprise SSO via SAML 2.0 · Okta · Azure AD · Google Workspace · OneLogin

/sso-saml-config

API docs

REST API documentation · OpenAPI spec · code samples 4 languages

/api-docs

API rate limits

Rate limits per-tenant + per-endpoint · 429 handling · upgrade paths

/api-rate-limits

Integraciones

Cal.com · Stripe · Meta WhatsApp · Sentry · Cloudflare · vendor stack

/integrations

¿Tu procurement team necesita NDA-protected docs?

Para Enterprise procurement deep-dives · SOC2 reports (post-cert) · pen test reports detallados · architecture diagrams · code samples · disponibles bajo NDA Enterprise · founder responde personally.

Solicitar NDA pack DSO/Enterprise Contacto directo