# Trust Center | SAVRN AI Infrastructure
Source: https://savrn.com/trust
Markdown alternate of the page above; the site index is https://savrn.com/llms.txt

---

SAVRN/Trust Center

# Trust Center.

Platform-level commitments and evidence across the SAVRN AI Factory. Drill into a deployment's Trust Center from its project page for site-specific data.

## Certifications In progress

Third-party certifications and accreditations claimed by Savrn and its hardware suppliers.

- IMDC hardware: UL listing in progress (manufacturer driven, est. Q3 2026).
- Octopod cooling pod: pre-certification testing complete; ETL filing prepared.
- Savrn platform: SOC 2 Type I scoping kicked off May 2026.

## Quality release Available

How a unit moves from manufacturing to customer-ready, including the 4-agent release gate.

- Every unit passes a 4-agent release gate before customer ship.
- BSVA (business-system validation) → VSVA (vendor & supplier verification) → LSVA (logistics & shipment validation) → SALA (sign-off & customer letter).
- Each gate writes a SHA-256-chained entry to the platform audit log; any gate failure blocks shipment and pages the program owner.

## Security In progress

How customer data, agent actions, and platform access are protected.

- All access via Tailscale-only ingress (no public internet exposure to the platform).
- Per-tenant SQLite isolation; tenant DBs at /var/lib/savrn/tenants/{slug}/savrn.db.
- Argon2 password hashing, DB-backed session tokens (hashed at rest).
- SHA-256-chained audit_events for tamper-evident logging.
- Pending: SOC 2 Type I (est. Q4 2026), formal pen test (scheduled Q3 2026).
- Penetration test scheduled for Q3 2026 with a Big Four firm. Findings will be folded into the SOC 2 Type I report.

## Compliance In progress

Regulatory frameworks each AI Factory deployment must satisfy.

- AI Factory deployments are scoped per-jurisdiction; required frameworks (NERC CIP, NIST 800-53 Low, etc.) are tracked per project on its Trust page.
- Sovereign deployments (Panama, IVDC) include data-residency commitments in the contract; verification is part of the SALA gate.
- Pending: ISO 27001 readiness assessment (est. Q1 2027).

## Legal & governance Available

Contracts, NDAs, MSAs, governance documents, and audit trail.

- Mutual NDA executed before any pitch data room access.
- Standard MSA + per-deployment SOW pattern for production deals.
- All counterparty-signed documents stored under crm_documents with checksum + signature audit chain.

## Operations assurance Available

Live maintenance health for the deployed fleet — PMP completion, work order SLA.

- Each AI Factory deployment publishes live PMP (Preventive Maintenance Program) completion and Work Order SLA metrics on its Trust page.
- Customer-facing summary is a translated subset of the operator dashboard, produced by the customer-safe translation chain.
- Per-project status appears at /projects/{slug}/trust once data starts flowing.

## Commercial assurance In progress

Capacity guarantees, pricing transparency, performance SLAs.

- MW commitments expressed per-deal in crm_deals.mw_commitment with revenue gate.
- Token-tier pricing per channel is configurable, audited, and version-stamped.
- Capacity model rolls up at /admin/portfolio; per-project capacity at /projects/{slug}.
- Pending: published rate card + SLA credit schedule (drafting).

## Sustainability (ESG) Roadmap

Environmental footprint, sustainability commitments, community impact.

- Per-site grid mix, water consumption, and waste-heat reuse metrics in scope.
- Vegas: planned WaterSense / LEED-aligned cooling design.
- Panama: hydro-dominant grid baseline already favourable; verification work scheduled.
- Target: first ESG summary published Q1 2027.