SECURITY · THE CONTROL ROOM

You hold the key.

The workforce operates inside your institution. You grant the authority, you draw the boundary, you press the button. This page is the proof. Not of words — of the console.

Three keys. None can be skipped.the control architecture
01 · AUTHORITY

Bounded by scope.

Each operative reaches only the systems in its mandate, only for the actions in that mandate.

02 · APPROVAL

A human signature.

Every irreversible action requires a human approval, by name. No exceptions.

03 · RECORD

A tamper-proof log.

Every action is written to a chained record. It cannot be deleted, edited, or denied.

The authorization console.fictional demo · real state machine
AUTHORIZATION CONSOLE · MERIDYEN BANK (FICTIONAL)NOMINAL
OPERATIVEREADWRITEESCALATEDELETE
LIVE STATUS · 10 OPERATIVES
KILL SWITCH · ALL OPERATIVES
System nominal. The button stops every operative with a single command.
Records stay sealed. Data never moves.
Where does it live?you decide the deployment region
INTERNAL SYSTEMS ERP / CRM e-Invoice Messaging Core Banking REGION BOUNDARY · TR WORKFORCE your tenant · isolated CLOUD data: EU + TR copy SOVEREIGN TR data: TR only ON-PREM data: never leaves the building encrypted backbone · EU in-region line · TR local network · your backbone model: tenant-dedicated · your data is never used for training
CLOUD · SHARED BACKBONE
Region: EU / TR optional
Keys: newworker KMS · rotated
Isolation: logical, per tenant
Backup: daily · chained
Start: 2 weeks
If you ever want to leave.exit is part of the contract

Exit is part of the job too. What happens is written down from the start, clause by clause. Nothing is left to later negotiation.

DAY 0

One notice is enough.

You send an e-mail and the process starts. We don’t ask for a reason. There is no “how do we keep you” meeting; the decision is yours.

WITHIN 30 DAYS

We hand over everything.

Institutional memory, settings, records, derived work. In a readable format, with sources, against a signature. What is yours stays with you.

DAY 45

Nothing remains with us.

Copies are destroyed, and a signed destruction certificate documenting it is delivered. If you want an audit, we are open.

These are not promises; they are contract clauses. You read them before you sign.

in the contract · c.14.2 unilateral notice · c.14.4 handover 30 days · c.14.5 destruction certificate 45 days
SOC 2ISO 27001ISO 42001-alignedKVKKGDPREU AI Act-ready
See inside the machine →Eight layers, a trust curve, the Council. Read the thesis →Signed by the founders, open to the public. Start the discovery →Two weeks. One deliverable. A firm price.