Security architecture
Managed production uses separated frontend, backend, database, Redis and object-storage services with environment-specific configuration.
Trust Center
Trust posture for governed enterprise decisions.
Stactix communicates only factual controls: tenant isolation, access control, auditability, provenance, governed review, private Vault and production architecture.
Trust posture
Factual governance and security posture.
This page only states proven repository-controlled posture and does not claim external certifications.
Tenant isolation
Customer workspaces are isolated by tenant and organisation boundaries.
Authentication / authorization
Portal, role, object and delegated Advisory boundaries are enforced by the product.
Data access control
Object and foreign-tenant denial paths are part of the proven controlled canary posture.
Private Vault
Vault artifacts are bounded by authorization and do not become trusted evidence automatically.
Auditability
Decision, evidence, review, export and governance actions are recorded for review.
Provenance
Evidence, assumptions, source references, versions and effective dates remain attributable.
Governed review
Evidence review and trust posture are explicit; source or Vault membership does not imply approval.
Application / infrastructure separation
Cloudflare, Render, Supabase, Redis and R2 are used in the proven managed architecture.
Backup / recovery posture
Validated backup evidence exists, while faithful Supabase-compatible restore rehearsal remains deferred by explicit human risk acceptance.
Operational controls
Health, readiness, logging, rollback, restart and alerting evidence are recorded in the launch ledger.
No unproven certification claims
The website does not claim SOC 2, ISO certification or penetration testing unless independently proven.
Procurement
Procurement-friendly without unsupported claims.
Data governance
Tenant isolation, access control, audit, provenance and private Vault boundaries are product principles.
Deferred restore rehearsal
The faithful Supabase-compatible restore rehearsal remains deferred by explicit human risk acceptance.
External validation
Independent security validation, legal approval and customer-specific procurement remain human/external actions.
Recovery posture
Backup evidence exists; restore rehearsal remains an accepted residual risk.
Validated backup evidence
Repository ledger records validated logical backup, hash integrity, catalogue validation, restart/recovery, rollback and alerting proof.
Restore rehearsal disclosure
Faithful Supabase-compatible restore rehearsal is not claimed complete and remains deferred by explicit human risk acceptance.
Scale-up boundary
The rehearsal remains required before broader customer scale-up or general availability.
Enterprise procurement
Procurement support is available without unsupported certifications.
Security questions
Use security@stactixsystems.com for architecture, access control, Vault and procurement review.
Legal and privacy questions
Legal approval, DPA, SLA and customer-specific procurement remain human/external until completed.
Subprocessor transparency
The public trust posture names the managed architecture providers factually without claiming external certification completion.
Stactix supports governed decision analysis. Final legal, procurement, compliance, financial and operational approvals remain with customer owners.
Evaluate Stactix
Explore the governed Decision Operating System.
Review the product tour, pricing and sample Decision Brief before choosing a Pilot or enterprise evaluation path.