mirror of
https://github.com/hanzo-apps/industries.git
synced 2026-11-02 05:26:51 +00:00
This site claimed SOC 2 Type II and ISO 27001 certification, and said our controls had been "audited and certified by independent third-party auditors". No report, attestation letter, auditor or audit tooling exists anywhere in the estate, and two other Hanzo properties said the opposite about the same certification. A certificate claim is one a buyer verifies by asking for the report, so it was an exposure with nothing behind it. What replaces it is a statement about how we operate rather than about what we hold: controls aligned to the SOC 2 Type II control set, which is true whether an assessment is planned, running or finished. The formal certification is scoped per enterprise engagement, which is both accurate and the stronger enterprise line - it opens a procurement conversation instead of inviting a request for a document we cannot send. The 99.99% uptime SLA figure goes for the same reason: an availability number is contractual and belongs in a contract. The page describes the redundancy instead. The 90-day uptime figure on the status page stays, because that is a measured record rather than a promise. Co-authored-by: Hanzo Dev <[email protected]>