say what our controls are, not that we hold a certificate we do not have

there is no soc 2 report, no iso 27001 certificate, no auditor and no trust
center behind the words this site was using. "soc 2 type ii certified",
"soc2 type 2 attested", "annual audit completed" and "hipaa compliant" each
tell a buyer a document exists that they can ask for, and procurement will
ask. a claim we cannot produce evidence for is worse than no claim: it turns
a security review into a credibility problem, and it is the kind of statement
a regulator and a plaintiff both read literally.

what is true is the control set. encryption in transit and at rest,
role-based access control and audit logging are real and running, so the copy
now says controls aligned to the soc 2 type ii control set and stops there.
gdpr and ccpa are laws rather than certificates and those claims stand
untouched.

the compliance work is still on offer, so nothing is left as a hole or an
apology. formal certification -- soc 2 type ii, iso 27001, hipaa with a baa --
is scoped per enterprise engagement, which is the honest version of the sale
and also the true one. no timeline is promised anywhere, because we do not
control an auditor's calendar.

uptime figures go with them. 99.9/99.99 presented as an sla is a contractual
number, and we publish no availability agreement, so the promise is replaced
by the architecture that actually delivers it: multi-region redundancy with
automated failover. measured records on the status page are left alone, as
are illustrative numbers inside product mockups.

Co-authored-by: Hanzo Dev <[email protected]>

src/components/analytics/Security.tsx

@@ -4,10 +4,10 @@ import { motion } from "framer-motion";
 import { ShieldCheck, Lock, CheckCircle } from "lucide-react";
 
 const certifications = [
-  { name: "SOC 2 Type II", details: "Certified for organizational controls and security." },
+  { name: "SOC 2 Type II controls", details: "Encryption in transit and at rest, role-based access control, and audit logging." },
   { name: "GDPR compliance", details: "Fully compliant with European data protection regulations." },
-  { name: "ISO 27001 certified", details: "International standard for information security management." },
-  { name: "HIPAA compliant", details: "Compliant with healthcare data protection requirements." }
+  { name: "CCPA compliance", details: "Fully compliant with California consumer privacy requirements." },
+  { name: "Certification scoped per engagement", details: "Formal certification — SOC 2 Type II, ISO 27001, HIPAA with a BAA — is scoped per enterprise engagement. Tell us what your procurement needs." }
 ];
 
 const SecurityFeatures = [
@@ -85,7 +85,7 @@ const Security = () => {
             className="lg:col-span-2"
           >
             <div className="bg-gradient-to-br from-gray-900 to-gray-900/50 rounded-xl border border-gray-800 p-6 h-full">
-              <h3 className="text-xl font-bold mb-6">Compliance Certifications</h3>
+              <h3 className="text-xl font-bold mb-6">Compliance & Controls</h3>
               
               <div className="grid grid-cols-1 md:grid-cols-2 gap-6">
                 {certifications.map((cert, index) => (

src/components/balancer/EnterpriseSolutions.tsx

@@ -47,7 +47,7 @@ const EnterpriseSolutions = () => {
               <div>
                 <h3 className="text-2xl font-semibold mb-2">High Availability Clustering</h3>
                 <p className="text-neutral-300">
-                  Multi-region and multi-zone failover capabilities with automated health checks and self-healing for 99.99% uptime SLAs.
+                  Multi-region and multi-zone failover capabilities with automated health checks and self-healing.
                 </p>
               </div>
             </div>

src/components/base/Compliance.tsx

@@ -25,11 +25,11 @@ const Compliance = () => {
               <div className="mt-4 flex flex-wrap gap-4">
                 <div className="flex items-center bg-neutral-800/20 border border-neutral-800/50 rounded-md px-3 py-1">
                   <Lock className="h-4 w-4 text-neutral-400 mr-2" />
-                  <span className="text-neutral-300 text-sm">SOC2 Type 2 Certified</span>
+                  <span className="text-neutral-300 text-sm">SOC 2 Type II controls</span>
                 </div>
                 <div className="flex items-center bg-neutral-800/20 border border-neutral-800/50 rounded-md px-3 py-1">
                   <Lock className="h-4 w-4 text-neutral-400 mr-2" />
-                  <span className="text-neutral-300 text-sm">HIPAA Compliant</span>
+                  <span className="text-neutral-300 text-sm">Certification scoped per engagement</span>
                 </div>
               </div>
             </div>

src/components/base/Infrastructure.tsx

@@ -65,7 +65,7 @@ const Infrastructure = () => {
             </div>
             <h3 className="text-xl font-semibold text-[var(--white)] mb-3">High Redundancy</h3>
             <p className="text-neutral-300">
-              Fault-tolerant architecture with redundancy and failover capabilities to ensure 99.99% uptime.
+              Fault-tolerant architecture with multi-region redundancy and automated failover.
             </p>
           </motion.div>
         </div>

src/components/calculator/CostSummary.tsx

@@ -52,7 +52,7 @@ const CostSummary = ({
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-2">
             <Shield className="h-4 w-4 text-neutral-400" />
-            <span className="text-neutral-400">SOC2 Type 2 Compliance</span>
+            <span className="text-neutral-400">SOC 2 Type II controls</span>
           </div>
           <div className="flex items-center gap-3">
             <span>${costs.compliance.toFixed(2)}</span>

src/components/cloud/CloudHero.tsx

@@ -87,7 +87,7 @@ hanzo edge status
     },
     security: {
       title: "Enterprise Security",
-      code: `# SOC 2 & HIPAA compliant
+      code: `# SOC 2 Type II controls
 hanzo security audit
 
 # Private networking
@@ -177,7 +177,7 @@ const CloudHero = () => {
               className="inline-flex items-center gap-2 px-3 py-1 rounded-full text-xs font-medium mb-6"
               style={{ backgroundColor: `${BRAND_COLOR}20`, color: BRAND_COLOR }}
             >
-              90+ Managed Services • Global Edge • 99.99% SLA
+              90+ Managed Services • Global Edge • Multi-Region Failover
             </motion.div>
 
             <motion.h1

src/components/cloud/Features.tsx

@@ -110,7 +110,7 @@ const Features = () => {
             <Lock className="w-12 h-12 text-neutral-400 mb-6" />
             <h3 className="text-xl font-bold mb-4">Enterprise Security</h3>
             <p className="text-neutral-300">
-              SOC 2, GDPR, and HIPAA compliant infrastructure with private networking, encryption, and audit logging.
+              SOC 2 Type II controls on GDPR-compliant infrastructure with private networking, encryption, and audit logging.
             </p>
           </motion.div>
         </div>

src/components/cloud/Security.tsx

@@ -37,7 +37,7 @@ const Security = () => {
               {[
                 "Single Sign-On",
                 "Guaranteed Support Response Times",
-                "SOC2 Type 2 Attested",
+                "SOC 2 Type II controls",
                 "Memory-safe Rust and Go stack",
                 "CI/CD Integration"
               ].map((feature, index) => (

src/components/hanzoapp/FAQSection.tsx

@@ -28,7 +28,7 @@ const faqs = [
   },
   {
     question: "Is my code private?",
-    answer: "In Local AI mode, absolutely - nothing leaves your machine. In cloud mode, we never train on your code and offer SOC 2 compliance, E2E encryption, and enterprise data isolation options.",
+    answer: "In Local AI mode, absolutely - nothing leaves your machine. In cloud mode, we never train on your code and offer controls aligned to the SOC 2 Type II control set, E2E encryption, and enterprise data isolation options.",
   },
 ];
 

src/components/hanzoapp/HanzoAppPricing.tsx

@@ -75,7 +75,7 @@ const HanzoAppPricing = () => {
     "LDAP & RBAC",
     "Versioning",
     "Audit Logs",
-    "99.99% Uptime SLA"
+    "Multi-region redundancy with automated failover"
   ];
 
   return (

src/components/hanzodev/FAQSection.tsx

@@ -28,7 +28,7 @@ const faqs = [
   },
   {
     question: "How does Hanzo AI ensure code privacy?",
-    answer: "Your code never leaves your environment. Hanzo Dev runs locally with end-to-end encryption. For enterprise deployments, we offer complete data isolation and SOC 2 compliance.",
+    answer: "Your code never leaves your environment. Hanzo Dev runs locally with end-to-end encryption. For enterprise deployments, we offer complete data isolation and controls aligned to the SOC 2 Type II control set — encryption in transit and at rest, role-based access control, and audit logging. Formal certification is scoped per engagement.",
   },
 ];
 

src/components/home2/Features.tsx

@@ -17,7 +17,7 @@ const features = [
   {
     icon: <Shield className="h-6 w-6" />,
     title: "Enterprise Ready",
-    description: "SOC 2, GDPR, and HIPAA compliant with 99.9% uptime SLA."
+    description: "SOC 2 Type II controls, GDPR compliant, with multi-region redundancy and automated failover."
   },
   {
     icon: <Bot className="h-6 w-6" />,

src/components/index3/cloud-services/globe/GlobeContainer.tsx

@@ -45,7 +45,7 @@ const GlobeContainer: React.FC = () => {
         <div className="mt-8 bg-[var(--black)]/30 backdrop-blur-sm rounded-xl p-4 border border-neutral-800/20">
           <h3 className="text-2xl font-semibold text-[var(--white)] mb-2">Global Network</h3>
           <p className="text-neutral-300 text-sm max-w-md mx-auto">
-            Deploy to 35+ regions around the world with 99.99% uptime SLA and automatic failover.
+            Deploy to 35+ regions around the world with multi-region redundancy and automatic failover.
           </p>
         </div>
       </div>

src/components/index5/AICloudSection.tsx

@@ -12,7 +12,7 @@ const AICloudSection: React.FC = () => {
   const features = [
     { icon: <Cloud className="h-6 w-6 text-neutral-400" />, title: "Global Infrastructure", description: "Deploy AI models across 35+ regions worldwide" },
     { icon: <Server className="h-6 w-6 text-neutral-400" />, title: "Compute Scaling", description: "Automatically scale resources based on demand" },
-    { icon: <Shield className="h-6 w-6 text-neutral-400" />, title: "Enterprise Security", description: "SOC 2 Type II, HIPAA, and GDPR compliant" },
+    { icon: <Shield className="h-6 w-6 text-neutral-400" />, title: "Enterprise Security", description: "SOC 2 Type II controls, GDPR compliant" },
     { icon: <Zap className="h-6 w-6 text-neutral-400" />, title: "Low Latency", description: "Sub-100ms response times for AI inference" },
     { icon: <Globe className="h-6 w-6 text-neutral-400" />, title: "Global Edge Network", description: "Serve models from the edge for faster responses" },
     { icon: <Server className="h-6 w-6 text-neutral-400" />, title: "Model Optimization", description: "Automatic optimization for faster performance" }

src/components/machines/MachinesEnterprise.tsx

@@ -20,7 +20,7 @@ const MachinesEnterprise = () => {
     {
       icon: Shield,
       title: "Security & Compliance",
-      description: "SOC 2, HIPAA, and GDPR compliant infrastructure with hardware-level isolation."
+      description: "SOC 2 Type II controls on GDPR-compliant infrastructure with hardware-level isolation."
     },
     {
       icon: Database,

src/components/observability/Security.tsx

@@ -4,11 +4,10 @@ import { motion } from "framer-motion";
 import { Shield, CheckCircle } from "lucide-react";
 
 const securityFeatures = [
-  "SOC 2 Type II", 
-  "ISO 27001 certified", 
-  "GDPR compliant", 
-  "HIPAA compliant", 
-  "End-to-end encryption", 
+  "SOC 2 Type II controls",
+  "Certification scoped per engagement",
+  "GDPR compliant",
+  "End-to-end encryption",
   "Secure data residency options", 
   "Role-based access control", 
   "Audit logs"
@@ -73,9 +72,9 @@ const Security = () => {
                 </div>
                 
                 <div className="bg-gray-900/50 rounded-lg p-4">
-                  <div className="mb-3 text-sm text-neutral-400">Security Certifications</div>
+                  <div className="mb-3 text-sm text-neutral-400">Control Frameworks</div>
                   <div className="grid grid-cols-2 gap-3">
-                    {["SOC 2", "ISO 27001", "GDPR", "HIPAA"].map((cert, idx) => (
+                    {["SOC 2 Type II", "ISO 27001", "GDPR", "CCPA"].map((cert, idx) => (
                       <div key={idx} className="bg-gray-800/50 p-2 rounded flex items-center">
                         <CheckCircle className="h-4 w-4 text-neutral-400 mr-2" />
                         <span className="text-sm">{cert}</span>

src/components/payments/TrustedBy.tsx

@@ -86,8 +86,8 @@ const TrustedBy = () => {
             transition={{ duration: 0.5, delay: 0.1 }}
             className="p-4"
           >
-            <div className="text-3xl font-bold text-neutral-400 mb-2">99.99%</div>
-            <div className="text-neutral-400">Uptime SLA</div>
+            <div className="text-3xl font-bold text-neutral-400 mb-2">Multi-Region</div>
+            <div className="text-neutral-400">Redundancy with Automated Failover</div>
           </motion.div>
           <motion.div
             initial={{ opacity: 0, y: 10 }}

src/components/pricing/EnterpriseFreePlans.tsx

@@ -13,7 +13,7 @@ const EnterpriseFreePlans = () => {
       "Everything in the Team plan",
       "Expanded context window",
       "Highest limits on messaging & features",
-      "Enhanced security (CSA, SOC 2, GDPR, CCPA)",
+      "Enhanced security (SOC 2 Type II controls, GDPR, CCPA)",
       "User management via SCIM and SSO",
       "Domain verification, user analytics",
       "Custom data retention policies",

src/components/pricing/FeatureComparison.tsx

@@ -28,7 +28,7 @@ const FeatureComparison = () => {
         { name: "Admin Console", pro: false, max: false, team: true, enterprise: true },
         { name: "User Management", pro: false, max: false, team: true, enterprise: true },
         { name: "Data Exclusion from Training", pro: false, max: false, team: true, enterprise: true },
-        { name: "Enhanced Security (SOC 2, GDPR)", pro: false, max: false, team: false, enterprise: true },
+        { name: "Enhanced Security (SOC 2 Type II controls, GDPR)", pro: false, max: false, team: false, enterprise: true },
         { name: "Custom Data Retention", pro: false, max: false, team: false, enterprise: true },
       ]
     },

src/components/pricing/PricingFAQ.tsx

@@ -47,7 +47,7 @@ const PricingFAQ = () => {
     },
     {
       question: "How secure is it?",
-      answer: "Security is our top priority. We use industry-standard encryption for all data, both in transit and at rest. Our infrastructure is hosted on secure cloud providers with SOC 2 compliance, and we regularly conduct security audits and penetration testing to ensure your data remains protected."
+      answer: "Security is our top priority. We use industry-standard encryption for all data, both in transit and at rest. Our infrastructure runs controls aligned to the SOC 2 Type II control set — encryption in transit and at rest, role-based access control, and audit logging — and we regularly conduct security audits and penetration testing to ensure your data remains protected."
     },
     {
       question: "How is my data used?",

src/components/pricing/TeamEnterprisePlans.tsx

@@ -49,7 +49,7 @@ const TeamEnterprisePlans = () => {
         "Everything in the Team plan",
         "Expanded context window",
         "Highest limits on messaging & features",
-        "Enhanced security (CSA, SOC 2, GDPR, CCPA)",
+        "Enhanced security (SOC 2 Type II controls, GDPR, CCPA)",
         "User management via SCIM and SSO",
         "Domain verification, user analytics",
         "Custom data retention policies",

src/components/realtime/Scaling.tsx

@@ -118,7 +118,7 @@ const Scaling = () => {
             <Cpu className="h-8 w-8 text-neutral-400 mr-4" />
             <div>
               <h4 className="text-[var(--white)] font-medium">High Availability</h4>
-              <p className="text-neutral-400 text-sm">99.99% uptime SLA guarantee</p>
+              <p className="text-neutral-400 text-sm">Multi-region redundancy with automated failover</p>
             </div>
           </div>
           

src/components/sections/Base.tsx

@@ -92,7 +92,7 @@ const client = createClient();`}</code>
                   <Zap className="h-6 w-6 text-neutral-400 mt-1" />
                   <div>
                     <h4 className="text-[var(--white)] font-semibold">Enterprise Ready</h4>
-                    <p className="text-neutral-300">SOC2, GDPR, and HIPAA compliant infrastructure</p>
+                    <p className="text-neutral-300">SOC 2 Type II controls, GDPR compliant</p>
                   </div>
                 </li>
                 <li className="flex items-start space-x-3">

src/components/sections/Network.tsx

@@ -56,7 +56,7 @@ const node = connectNode();`}</code>
             <div className="p-6 bg-gradient-to-br from-white/5 to-transparent rounded-xl ring-1 ring-white/10">
               <Server className="h-8 w-8 text-[var(--white)] mb-4" />
               <h4 className="text-lg font-semibold text-[var(--white)] mb-2">Reliable</h4>
-              <p className="text-neutral-300">99.99% uptime guarantee</p>
+              <p className="text-neutral-300">Multi-region redundancy with automated failover</p>
             </div>
             <div className="p-6 bg-gradient-to-br from-white/5 to-transparent rounded-xl ring-1 ring-white/10">
               <Shield className="h-8 w-8 text-[var(--white)] mb-4" />

src/components/team/AuditFeatures.tsx

@@ -118,7 +118,7 @@ const AuditFeatures = () => {
             <ul className="space-y-2">
               <li className="flex items-start">
                 <CheckCircle className="h-5 w-5 text-neutral-400 mr-2 mt-0.5 flex-shrink-0" />
-                <span className="text-neutral-300">SOC 2, HIPAA, GDPR, and CCPA compliant</span>
+                <span className="text-neutral-300">SOC 2 Type II controls, GDPR and CCPA compliant</span>
               </li>
               <li className="flex items-start">
                 <CheckCircle className="h-5 w-5 text-neutral-400 mr-2 mt-0.5 flex-shrink-0" />
@@ -142,11 +142,11 @@ const AuditFeatures = () => {
           <div className="flex justify-center gap-8 flex-wrap">
             <div className="flex items-center">
               <Lock className="h-6 w-6 text-neutral-400 mr-2" />
-              <span className="text-neutral-300">SOC 2 Type II</span>
+              <span className="text-neutral-300">SOC 2 Type II controls</span>
             </div>
             <div className="flex items-center">
               <Lock className="h-6 w-6 text-neutral-400 mr-2" />
-              <span className="text-neutral-300">HIPAA</span>
+              <span className="text-neutral-300">Certification scoped per engagement</span>
             </div>
             <div className="flex items-center">
               <Lock className="h-6 w-6 text-neutral-400 mr-2" />
@@ -158,11 +158,11 @@ const AuditFeatures = () => {
             </div>
             <div className="flex items-center">
               <Lock className="h-6 w-6 text-neutral-400 mr-2" />
-              <span className="text-neutral-300">ISO 27001</span>
+              <span className="text-neutral-300">Role-based access control</span>
             </div>
             <div className="flex items-center">
               <Bookmark className="h-6 w-6 text-neutral-400 mr-2" />
-              <span className="text-neutral-300">99.9% Uptime SLA</span>
+              <span className="text-neutral-300">Multi-region redundancy with automated failover</span>
             </div>
           </div>
         </motion.div>

src/components/vector/DeploymentOptions.tsx

@@ -53,7 +53,7 @@ const DeploymentOptions = () => {
         "Pay-as-you-go serverless option",
         "Dedicated clusters for enterprise needs",
         "10x faster than self-hosted solutions",
-        "99.99% uptime SLA and global availability"
+        "Multi-region redundancy with automated failover and global availability"
       ],
       cta: "Try Free",
       color: "teal"

src/components/zen/ProductsOverview.tsx

@@ -143,7 +143,7 @@ const EcosystemDetail: React.FC<EcosystemDetailProps> = ({ isOpen, onClose, type
                       <h4 className="text-white font-medium">Enterprise Security</h4>
                     </div>
                     <p className="text-neutral-400 text-sm">
-                      SOC 2 compliance, end-to-end encryption, and comprehensive audit logging for mission-critical AI systems.
+                      Controls aligned to the SOC 2 Type II control set — encryption in transit and at rest, role-based access control, and audit logging — for mission-critical AI systems.
                     </p>
                   </motion.div>
                 </div>

src/constants/navigation.ts

@@ -144,8 +144,8 @@ export const solutions = [
     title: "Industries",
     href: "/solutions/industries",
     items: [
-      { name: "Healthcare", href: "/solutions/industries/healthcare", description: "HIPAA-compliant AI" },
-      { name: "Finance", href: "/solutions/industries/finance", description: "SOC 2 compliant infrastructure" },
+      { name: "Healthcare", href: "/solutions/industries/healthcare", description: "Certification scoped per engagement" },
+      { name: "Finance", href: "/solutions/industries/finance", description: "SOC 2 Type II controls" },
       { name: "Retail", href: "/solutions/industries/retail", description: "Personalization and recommendations" },
       { name: "Enterprise", href: "/solutions/industries/enterprise", description: "Private cloud deployment" }
     ]

src/pages/Blockchain.tsx

@@ -45,7 +45,7 @@ const CAPABILITIES = [
       "Archive nodes for historical data access",
       "WebSocket subscriptions for real-time events",
       "Rate limiting and load balancing built-in",
-      "99.9% uptime SLA with global distribution",
+      "Multi-region redundancy with automated failover and global distribution",
     ],
   },
   {

src/pages/Calculator.tsx

@@ -45,7 +45,7 @@ const Calculator = () => {
               </li>
               <li className="flex items-center gap-2">
                 <Shield className="h-4 w-4 text-neutral-400" />
-                <span><strong>Compliance:</strong> $99/month for SOC2 Type 2 compliance</span>
+                <span><strong>Compliance:</strong> $99/month for SOC 2 Type II controls</span>
               </li>
               <li className="flex items-center gap-2">
                 <HeadsetIcon className="h-4 w-4 text-neutral-400" />

src/pages/Enterprise.tsx

@@ -10,7 +10,7 @@ const Enterprise = () => {
     {
       icon: <Shield className="h-8 w-8 text-neutral-400" />,
       title: "Enterprise Security",
-      description: "SOC 2, GDPR, CCPA compliance with advanced encryption and audit logging"
+      description: "SOC 2 Type II controls with GDPR and CCPA compliance, advanced encryption, and audit logging"
     },
     {
       icon: <Users className="h-8 w-8 text-neutral-400" />,
@@ -20,7 +20,7 @@ const Enterprise = () => {
     {
       icon: <Globe className="h-8 w-8 text-neutral-400" />,
       title: "Global Infrastructure",
-      description: "Multi-region deployment with 99.99% uptime SLA and dedicated support"
+      description: "Multi-region deployment with automated failover and dedicated support"
     },
     {
       icon: <Zap className="h-8 w-8 text-neutral-400" />,

src/pages/Identity.tsx

@@ -192,7 +192,7 @@ const Identity = () => {
               <ul className="space-y-2 text-neutral-300">
                 <li className="flex items-start">
                   <span className="text-neutral-400 mr-2">•</span>
-                  <span>SOC 2, GDPR, HIPAA, and PCI DSS compliance</span>
+                  <span>SOC 2 Type II controls, GDPR compliance, certification scoped per engagement</span>
                 </li>
                 <li className="flex items-start">
                   <span className="text-neutral-400 mr-2">•</span>

src/pages/OrganizationProfile.tsx

@@ -22,7 +22,7 @@ const OrganizationProfile = () => {
     website: "https://hanzo.industries",
     teamSize: "43 members",
     plans: "Pro Plan ($49/month)",
-    security: "SOC 2 Compliant, GDPR Ready"
+    security: "SOC 2 Type II controls, GDPR Ready"
   };
 
   // Mock team members data

src/pages/Platform.tsx

@@ -100,7 +100,7 @@ const DeploymentOptions = () => {
                 <span className="text-neutral-400">✓</span> Zero-config deployments
               </li>
               <li className="flex items-center gap-2">
-                <span className="text-neutral-400">✓</span> 99.99% SLA
+                <span className="text-neutral-400">✓</span> Multi-region failover
               </li>
             </ul>
             <Link

src/pages/Privacy.tsx

@@ -97,7 +97,7 @@ const Privacy = () => {
                 transition={{ duration: 0.4, delay: 0.15 }}
                 className="flex flex-wrap justify-center gap-3 mb-8"
               >
-                {["GDPR", "CCPA", "SOC 2", "HIPAA"].map((badge) => (
+                {["GDPR", "CCPA", "SOC 2 Type II controls", "Certification scoped per engagement"].map((badge) => (
                   <div
                     key={badge}
                     className="flex items-center gap-2 px-4 py-2 rounded-lg bg-neutral-900 border border-neutral-800"

src/pages/Security.tsx

@@ -28,12 +28,10 @@ import {
 const BRAND_COLOR = "#ffffff";
 
 const COMPLIANCE_BADGES = [
-  { name: "SOC 2 Type II", description: "Annual audit completed" },
+  { name: "SOC 2 Type II controls", description: "Encryption, RBAC, audit logging" },
   { name: "GDPR", description: "EU data protection" },
   { name: "CCPA", description: "California privacy" },
-  { name: "HIPAA", description: "Healthcare ready" },
-  { name: "ISO 27001", description: "Information security" },
-  { name: "PCI DSS", description: "Payment security" },
+  { name: "Certification scoped per engagement", description: "SOC 2 Type II, ISO 27001, HIPAA with a BAA" },
 ];
 
 const SECURITY_FEATURES = [
@@ -99,7 +97,7 @@ const Security = () => {
         <title>Security - Enterprise-Grade Protection | Hanzo AI</title>
         <meta
           name="description"
-          content="SOC 2, HIPAA, GDPR compliant. Enterprise-grade security with end-to-end encryption, MFA, and comprehensive access controls. Your data is protected."
+          content="SOC 2 Type II controls, GDPR compliant. Enterprise-grade security with end-to-end encryption, MFA, and comprehensive access controls. Your data is protected."
         />
       </Helmet>
 
@@ -130,7 +128,7 @@ const Security = () => {
                 style={{ backgroundColor: `${BRAND_COLOR}20`, color: BRAND_COLOR }}
               >
                 <Shield className="w-3.5 h-3.5" />
-                SOC 2 Type II Certified
+                SOC 2 Type II controls
               </motion.div>
 
               <motion.h1
@@ -267,16 +265,16 @@ const Security = () => {
                   Built on secure foundations
                 </h2>
                 <p className="text-neutral-400 mb-8">
-                  Our infrastructure runs on SOC 2 compliant data centers with 24/7 physical
-                  security, redundant power, and isolated network architecture. Every component
-                  is designed with security as the primary requirement.
+                  Our infrastructure runs in data centers with 24/7 physical security, redundant
+                  power, and isolated network architecture. Every component is designed with
+                  security as the primary requirement.
                 </p>
 
                 <div className="space-y-4">
                   {[
                     { icon: Server, text: "KVM hardware-isolated virtual machines" },
                     { icon: Eye, text: "24/7 security monitoring and alerting" },
-                    { icon: Clock, text: "99.99% uptime SLA with automatic failover" },
+                    { icon: Clock, text: "Multi-region redundancy with automated failover" },
                     { icon: FileCheck, text: "Automated security patching and updates" },
                   ].map((item, index) => {
                     const Icon = item.icon;
@@ -383,12 +381,12 @@ const Security = () => {
                   Security for the most demanding organizations
                 </h2>
                 <p className="text-neutral-400 mb-6">
-                  Whether you're in healthcare, finance, or government, Hanzo meets the
+                  Whether you're in healthcare, finance, or government, Hanzo is built for the
                   security and compliance requirements of regulated industries.
                 </p>
                 <p className="text-neutral-400">
-                  Our security team works directly with enterprise customers to understand
-                  their unique requirements and implement appropriate controls.
+                  Formal certification — SOC 2 Type II, ISO 27001, HIPAA with a BAA — is scoped
+                  per enterprise engagement. Tell us what your procurement needs.
                 </p>
               </motion.div>
             </div>

src/pages/SolutionIndustries.tsx

@@ -179,12 +179,11 @@ const SolutionIndustries: React.FC = () => {
         ],
         caseStudy: {
           title: "AI-Powered Patient Care Platform",
-          description: "We developed a secure, HIPAA-compliant platform that uses AI to analyze patient data and provide real-time clinical decision support, improving outcomes and reducing costs.",
+          description: "We developed a secure platform that uses AI to analyze patient data and provide real-time clinical decision support, improving outcomes and reducing costs.",
           results: [
             "22% improvement in clinical outcomes",
             "35% reduction in readmission rates",
-            "40% time savings for clinical staff",
-            "100% HIPAA compliance maintained"
+            "40% time savings for clinical staff"
           ]
         }
       },

src/pages/blockchain/HanzoNodes.tsx

@@ -44,7 +44,7 @@ const HanzoNodes = () => {
         },
         {
           icon: Shield,
-          title: "99.9% Uptime SLA",
+          title: "Multi-Region Redundancy",
           description: "Enterprise-grade reliability with automatic failover and redundancy across regions.",
         },
         {