IDSENTRAControls, boundaries, and evidence without inflated claims.
This public map separates implemented controls, architectural boundaries, validation work, framework alignment, certification targets, and deployment-specific evidence. It is an evaluation aid—not a certification statement.
Server-side sessions, password controls, revocation, and privileged authorization are part of the current application foundation.
Operational permissions and privileged actions are enforced inside protected application workflows according to assigned roles.
Operational identity, watchlist, case, evidence, and regulated-source data is separated from public website activity and restricted to authorized customer workflows.
Secrets, API credentials, session material, database credentials, and protected integration data are excluded from public surfaces and client-side configuration.
Relevant security and operational history can be retained under role-based access and configured lifecycle policy.
Deployment-specific backup, recovery, readiness, and continuity controls are validated against the selected operating model.
The website accepts business evaluation data rather than patron identity records and validates contact intake server-side.
Security controls and engineering practices are being mapped to applicable NIST, OWASP, and CIS guidance without representing that mapping as certification.
SOC 2 is a future independent-assurance target and is not represented as currently awarded.
ISO/IEC 27001 is a future certification target and is not represented as currently awarded.
Privacy positions, processor disclosures, regulatory mappings, and jurisdiction-specific evidence are verified for the actual deployment before they are relied upon.
Security evidence should answer practical questions.
Who can access protected records? Where does customer data live? How are credentials handled? What activity is auditable? What happens during degraded operation? How are backups, retention, integrations, and administrative changes controlled? IDSENTRA's trust materials are organized around those questions.
Review customer architecture →