Trust that holds up
in an audit.
A governance tool has to be governable itself. HEARTBEAT is built around tenant isolation, an explainable engine, and safety controls you hold the switch on — with your data resident in India.
Security pillars.
Tenant isolation
Row-level security is enforced throughout the data layer, not just at the API. One organisation's data cannot be queried by another — by construction.
Access model
Role archetypes define who sees what. An access-explain tool shows the three-layer verdict — RBAC, audience and row scope — with source citations for every "why can't X see Y?".
Auditability
Append-only audit with changed-keys diffs and CSV export. Every autopilot decision persists its full arithmetic — nothing the engine does is a black box.
Autonomy safety
An A0–A2 autonomy ladder governs how much the engine may act on its own, behind an organisation-wide, type-to-confirm kill switch.
Encryption
Encryption in transit and at rest across the managed platform, with secrets handled outside application code.
Data residency
A managed service with data resident in India. Enterprise plans add region pinning and a signed data-processing agreement.
An autopilot you can throttle — or stop — instantly.
Autonomy is a dial, not a default. Choose how much the engine may do on its own, and cut it to zero in one type-to-confirm action if you ever need to.
- A0Advise only — the engine recommends; humans act on everything.
- A1Act within bounds — pre-approved, reversible actions only.
- A2Act & notify — broader action with a full audit trail and instant rollback.
- ◼Kill switch — org-wide stop, gated by type-to-confirm, with a critical-priority notification.
Field evidence is personal data. We treat it that way.
Daily logs carry photos, locations and identities. HEARTBEAT is built to a DPDP-aligned posture — with purpose limits, retention controls and sensitive data kept out of client-facing surfaces by hard rule.
- ✓Data resident in India, managed and encrypted.
- ✓Client-safe by construction — portals show status words only; commercially sensitive fields are denied, not filtered.
- ✓Retention controls for field evidence and logs.
- ✓Anonymised pulse — sentiment is hashed at rest.
Where we are, honestly.
We'd rather tell you what's in place today and what's in flight than imply a badge we don't hold yet.
DPDP-aligned posture
Data resident in India, purpose limits, retention controls and client-safe surfaces enforced in the product.
SOC 2
Controls and evidence are being assembled toward a SOC 2 examination. Ask us for current status under NDA.
Independent pen test
Third-party penetration testing is scheduled as part of our path to general availability.
DPA & security review
Enterprise customers get a signed DPA, a security questionnaire response, and a review call with our team.
Need the security pack?
We'll share our architecture overview, data-handling details and current compliance status under NDA, and set up a review call with your security team.