DataFab / Architecture & Assurance Dossier
Under NDA · for security, architecture and risk teams
Documents and system access.
The Architecture & Assurance Dossier describes the control plane and data plane in full, the enforcement points and how each is verified, the egress matrix by edition, the authority model, resilience and recovery. Certification reports and access to a working system are released alongside it.
Contents
What is in it.
Reference architecture
Control plane and data plane in full, component by component, with what each holds and what it never holds.
Enforcement points
Each target-architecture enforcement point, the mechanism that implements it, and the engineering confirmation that demonstrates it.
Egress matrix
What crosses each boundary, in which direction, under whose authority, for every edition from Foundation to Sovereign.
Authority model
What the control plane may instruct, what it may not, and what the data plane refuses regardless of instruction.
Identity, keys and custody
Where custody sits per edition, key-management options, and the separation-of-duties model.
Resilience & recovery
Loss and corruption treated as distinct failure modes, recovery objectives, and the re-derivation path.
Build, release & supply chain
Signing, software inventory, provenance attestation and the customer approval gate.
Deployment-time decisions
The seven choices, who owns each, when it is made, and what it determines.
Request access
Documents and system access are released under mutual NDA. We send the NDA first — there is nothing to sign before you see what you are signing about. No nurture sequence, and no one calls unless you ask.
A draft has opened — it is not sent yet
Your details are in a pre-filled email to [email protected]. Press send in your mail client and it reaches us.
If nothing opened, your browser may be blocking mail links. Copy the address above and send us the same details directly.
Open the draft againRequest received
The mutual NDA follows within one business day. The documents are released as soon as it is countersigned, and system access is scheduled alongside it if you asked for it.
No mailing list · no nurture sequence
Also available