Security & compliance

Security is the product, not a feature. Every decision is logged, every change is reviewed, and the evidence is kept.

Trust registry

One shared control set, assessed in phases. This is the same registry shown on neurailabs.com, reviewed monthly.

Framework	Scope	Status
NIST SP 800-171 Rev 2	Self-assessment of all 110 controls; SPRS score submitted for DoD work.	In progress
SOC 2 Type I	Security criteria; design of controls, by an independent CPA firm.	At launch
SOC 2 Type II	Same controls, proven to operate over an observation period.	Next
CMMC Level 2	Third-party assessment when a contract involves CUI.	Planned
FedRAMP	Authorization for federal cloud use.	Planned
StateRAMP	Authorization for state and local government.	Planned
Kantara Initiative	Identity assurance certification for the verification service.	Planned
ISO/IEC 27001	Certified information security management system.	Planned

Targets are not certifications. Reports and assessments are shared under NDA once issued.

Your data

Hosted, private cloud or on-premises: your data stays inside the boundary you choose.

Report a security issue

Write to info@neurailabs.com. Our contact details are also published at /.well-known/security.txt. Please do not include sensitive data in your first message; we will arrange a secure channel.