Files
zeekayandHanzo Dev fc3e157cee say what our controls are, not that we hold a certificate we do not have
This site claimed SOC 2 Type II and ISO 27001 certification, and said our
controls had been "audited and certified by independent third-party
auditors". No report, attestation letter, auditor or audit tooling exists
anywhere in the estate, and two other Hanzo properties said the opposite
about the same certification. A certificate claim is one a buyer verifies
by asking for the report, so it was an exposure with nothing behind it.

What replaces it is a statement about how we operate rather than about
what we hold: controls aligned to the SOC 2 Type II control set, which is
true whether an assessment is planned, running or finished. The formal
certification is scoped per enterprise engagement, which is both accurate
and the stronger enterprise line - it opens a procurement conversation
instead of inviting a request for a document we cannot send.

The 99.99% uptime SLA figure goes for the same reason: an availability
number is contractual and belongs in a contract. The page describes the
redundancy instead. The 90-day uptime figure on the status page stays,
because that is a measured record rather than a promise.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-14 19:31:54 -07:00
..