Product · Security and sales teams answering buyers’ questionnaires.

Your Trust page is computed from the records, never typed in. Each fact shows when it was observed and whether it is current, stale or missing. Buyers get a signed snapshot they can check offline.

Scan my repos free Book a 20-minute walkthrough

The problem: Security questionnaires slow every enterprise deal, and static PDFs go out of date the day they are uploaded.
What it does: Publishes live facts from your records, lets buyers request gated documents through an NDA clickwrap, and signs a snapshot they can verify themselves.
The result: Buyers check your evidence instead of taking your word, and your team stops re-uploading PDFs.

Kestrel Pay

Trust Page, all production apps. Signed 6 Nov 2026, 11:22 UTC

Sample record · Kestrel Pay is fictional, demo key

Residency
14 volumes, 9 backups, logs and build artefacts stored in Lagos; backups in a second Lagos facility
Observed 6 Nov, 11:16 UTC, 6 min before signing
Current
Recovery
Restore drill: 48 s of data loss, restored in 9 min 12 s, checksums match
Observed 3 Nov, 02:40 UTC, 3 days before signing
Current
Change control
37 production changes in October, each approved by 2 named people
Observed 6 Nov, 10:22 UTC, 1 h before signing
Current
Reliability
October alerts delivered within 60 s, by delivery receipt: 99.6% (WhatsApp 99.5%, SMS 99.8%, email 100%). Acknowledged by a person within 5 min: 97.4%
Observed 6 Nov, 11:00 UTC, 22 min before signing
Current
Exit
Export drill for client-portal passed on 26 Sept. It is 41 days old, past its 30-day window
Observed 26 Sep, 09:30 UTC, 41 days before signing
Stale
Access review
No access review recorded for merchant-portal in the last 90 days
No record in its window
Missing

Attested by partner

Signed by the partner, not observed by the platform

Physical protection
Attested by partner
Guarding and monitoring of the cell facility
Physical protection partner (synthetic). Valid to 31 Mar 2027

Check the signature yourself

Your browser rebuilds the exact bytes that were signed and checks them against the published key. Nothing is sent anywhere.

Active

Shows this frozen, signed snapshot to one audience until it expires.

10:00

Opens for anyone with the link until it runs out or you revoke it.

Ed25519 over the canonical bytes. Key demo-41F5-C0A9: QfrsABKIusyFfYQRjK+tjKzqLsAZgCSkiHKPFrJnMP8=

What a fact contains

Every fact carries its observation time, its coverage and whether it is current. Facts a partner attests are labelled as theirs.

Change control: approvals, emergency changes and drift, by month.
Recovery: restore drills and their results.
Residency: where every store and backup sits.

Access for buyers

Public overview, gated documents behind an NDA clickwrap, auto-approval by email domain, or approval by the owner in Slack. Share links expire and can be revoked.

See what shipped without approval in your last 90 days.

Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.

Ship like a startup. Prove it like a bank.