Required controlCurrentLast reviewed Review by
Security & assurance
Demonstration — not production assurance
Live infrastructure test fixture; not approved production assurances.
Security at a glance
1 claim
| Area | What Source claims | Claim status | Freshness | Provenance |
|---|---|---|---|---|
| Reviewed scope | Within the stated service scope. | Required control | Current | Last reviewed Review by |
Our service profiles
2 services
What each Source service does, what sits outside it, and who authorises production changes. Scope is stated per service, because the safeguards that apply depend on it.
- Source AI assessmentAssessment
- Source AI implementationImplementation
An accessible diagram of the platform across three trust boundaries, with no published data flows and the safeguards on each. The same content is listed in full beneath the diagram.
Published safeguards across one category, each with its service scope, claim status and review dates. Controls published with a qualification say so on their own page.
- Published with qualification4
Where Source stands against each framework, stated as a status rather than a badge. A framework Source does not claim is listed as not claimed rather than omitted.
- Available1
The approved wording of each published policy, with the claim status it carries and the date it was last reviewed.
Downloadable documents, each carrying its classification, version, publication date and last-reviewed date, with the file format and size stated before you click.
Every third party in the service, with what it does, the data categories involved and the processing locations.
- Active1
The questions security reviewers ask most often, answered in the approved wording and dated like every other claim on this site.
Nothing is published in this section yet.
What is published openly, what is available on request, and what is confirmed against your own contract. Anything not published here is obtained by asking.
Nothing is published in this section yet.