mirror of
https://github.com/hanzo-docs/docs.git
synced 2026-10-26 10:55:57 +00:00
3e50fd8abc
Across the cloud, insights, bot, engine, ml and router sites the copy read "SOC 2 compliance", "SOC 2 ready" and "HIPAA / SOC2 ready"; the vault skill page and its card led with "PCI DSS Level 1" and "PCI DSS-compliant". Hanzo holds none of these — no report, no auditor, no attestation letter — and hanzo.ai/trust already says so, so the docs were contradicting our own trust page. Vault's architecture is the part that was true and it stays: card tokenization inside an isolated cardholder data environment, which is what keeps a customer's PCI scope small. The 99.9% uptime SLA on the cloud stat row goes too; it was a guarantee with no contract under it. Co-authored-by: Hanzo Dev <[email protected]>