Certifications
In progress
Third-party certifications and accreditations claimed by Savrn and its hardware suppliers.
- IMDC hardware: UL listing in progress (manufacturer driven, est. Q3 2026).
- Octopod cooling pod: pre-certification testing complete; ETL filing prepared.
- Savrn platform: SOC 2 Type I scoping kicked off May 2026.
Quality release
Available
How a unit moves from manufacturing to customer-ready, including the 4-agent release gate.
- Every unit passes a 4-agent release gate before customer ship.
- BSVA (business-system validation) → VSVA (vendor & supplier verification) → LSVA (logistics & shipment validation) → SALA (sign-off & customer letter).
- Each gate writes a SHA-256-chained entry to the platform audit log; any gate failure blocks shipment and pages the program owner.
Security
In progress
How customer data, agent actions, and platform access are protected.
- All access via Tailscale-only ingress (no public internet exposure to the platform).
- Per-tenant SQLite isolation; tenant DBs at /var/lib/savrn/tenants/{slug}/savrn.db.
- Argon2 password hashing, DB-backed session tokens (hashed at rest).
- SHA-256-chained audit_events for tamper-evident logging.
- Pending: SOC 2 Type I (est. Q4 2026), formal pen test (scheduled Q3 2026).
- Penetration test scheduled for Q3 2026 with a Big Four firm. Findings will be folded into the SOC 2 Type I report.
Compliance
In progress
Regulatory frameworks each AI Factory deployment must satisfy.
- AI Factory deployments are scoped per-jurisdiction; required frameworks (NERC CIP, NIST 800-53 Low, etc.) are tracked per project on its Trust page.
- Sovereign deployments (Panama, IVDC) include data-residency commitments in the contract; verification is part of the SALA gate.
- Pending: ISO 27001 readiness assessment (est. Q1 2027).
Legal & governance
Available
Contracts, NDAs, MSAs, governance documents, and audit trail.
- Mutual NDA executed before any pitch data room access.
- Standard MSA + per-deployment SOW pattern for production deals.
- All counterparty-signed documents stored under crm_documents with checksum + signature audit chain.
Operations assurance
Available
Live maintenance health for the deployed fleet — PMP completion, work order SLA.
- Each AI Factory deployment publishes live PMP (Preventive Maintenance Program) completion and Work Order SLA metrics on its Trust page.
- Customer-facing summary is a translated subset of the operator dashboard, produced by the customer-safe translation chain.
- Per-project status appears at /projects/{slug}/trust once data starts flowing.
Commercial assurance
In progress
Capacity guarantees, pricing transparency, performance SLAs.
- MW commitments expressed per-deal in crm_deals.mw_commitment with revenue gate.
- Token-tier pricing per channel is configurable, audited, and version-stamped.
- Capacity model rolls up at /admin/portfolio; per-project capacity at /projects/{slug}.
- Pending: published rate card + SLA credit schedule (drafting).
Sustainability (ESG)
Roadmap
Environmental footprint, sustainability commitments, community impact.
- Per-site grid mix, water consumption, and waste-heat reuse metrics in scope.
- Vegas: planned WaterSense / LEED-aligned cooling design.
- Panama: hydro-dominant grid baseline already favourable; verification work scheduled.
- Target: first ESG summary published Q1 2027.