TRUST CENTER / SNAPSHOT 2026-08-17
TRUST EVIDENCE FOR TECHNICAL AND PROCUREMENT REVIEW.
Verixos publishes the current state of its security controls, deployment paths, and review artifacts. Public, controlled-access, deployment-review, and roadmap states are kept distinct so teams can evaluate the evidence available for their program.
- Effective date
- 2026-08-17
- Last reviewed
- 2026-08-17
- Owner
- Verixos Security & Reliability
- Revision
- 1 published update
Current public posture
Public, controlled-access, deployment-review, and roadmap states stay separate so teams can match evidence to their review scope.
- Public now
- 1
- Controlled access
- 1
- Deployment review
- 2
- Roadmap
- 1
Artifact available
Shared during review
Verified per environment
Scheduled milestone
Solver Verification & ValidationPublic
A 63-case classified solver gate, exact and manufactured network oracles, named NAFEMS/NASA parity, expanded diffuse-gray radiation references, and one narrow NASA hardware-TVAC case are published with explicit claim boundaries.
Public status
Publicly available today
Evidence
Open validation page with gate status, evidence classes, benchmark methods, residuals, primary references, blockers, and limitations.
Primary audience
Engineering and procurement teams
SOC 2 Type II ReportRoadmap
Formal SOC 2 attestation is on the roadmap as of 2026-08-17. Existing security controls and evidence automation support current diligence reviews.
Public status
Formal attestation roadmap
Evidence
Roadmap target: formal operational evidence window during April 2026 through October 2026, then auditor-issued report.
Primary audience
Enterprise security reviewers
ITAR / Restricted Program FrameworkControlled access
Restricted-project access checks, US-person gating, data-residency enforcement, MFA enforcement, audit events, and deterministic-only advisor behavior are implemented for controlled workflows.
Public status
Application controls available during customer review
Evidence
Request-level governance tests, policy materials, access-control design, and deployment scoping shared during procurement.
Primary audience
Government and defense programs
GovCloud Deployment PathDeployment review
GovCloud-oriented infrastructure and runbooks support a customer-scoped first deployment and evidence review in the customer’s AWS GovCloud account.
Public status
Customer-scoped deployment review
Evidence
IaC specification, isolation model, first-deployment checklist, and GovCloud acceptance record.
Primary audience
Government and enterprise infrastructure teams
On-Premise / Air-Gapped DeploymentDeployment review
Docker, Kubernetes, self-host licensing, backup/restore, and isolated-network evidence are packaged for customer-scoped deployment and isolation review.
Public status
Self-host baseline with environment acceptance review
Evidence
Deployment package, licensing controls, self-hosted operational guidance, and air-gapped validation checklist.
Primary audience
Enterprise platform and security teams
Control domains
Expand a domain to review the controls represented by its current public state.
Identity & AccessImplemented
Least-privilege access, MFA requirements for admins, and auditable account controls.
- — Administrative MFA requirement
- — Role-scoped access control
- — Failed-login tracking and lockout support
- — Audit trail for sensitive actions
Encryption & ResidencyDocumented
Application controls and deployment requirements for encrypted transport, encrypted storage, and US-only residency.
- — Transport-encryption requirement verified per deployment
- — At-rest encryption requirement verified per storage service
- — US-only residency acceptance criteria for restricted workloads
- — Data export restriction hooks for controlled programs
Change ManagementImplemented
Versioned simulation artifacts, regression APIs, and reproducible run snapshots for engineering review.
- — Simulation run input snapshots
- — Thermal regression reporting
- — Version history for model changes
- — Traceable export and report generation
Vulnerability OperationsImplemented
Dependency scanning, patch workflows, and perimeter protections are part of the hardening baseline.
- — Automated dependency review hooks
- — Cloud perimeter protections
- — Documented patching workflow
- — Operational security monitoring baseline
Formal AttestationRoadmap
Auditor-issued certification artifacts follow the formal audit window; current diligence uses the available control evidence.
- — SOC 2 Type II report publication after issuance
- — Customer review-material updates after report delivery
- — Procurement-facing trust center refresh on issuance
Public artifacts
Public artifacts are reachable now. Controlled-access materials are shared during solution, security, or procurement review. Deployment-specific materials are reviewed against the target environment and acceptance criteria.
Change history
Refreshed solver V&V evidence classes, gate posture, claim boundaries, and deployment-review scope.
Reviewing a specific deployment?
Tell us the deployment, security, or procurement scope. We’ll share the current source-backed materials relevant to that review.