Independent penetration testing
Target
Scheduled against the demo plane before general availability.
Security posture, stated plainly.
What we hold today, what we are building toward. No certifications claimed that we do not hold.
Product status: the control plane demo environment is currently in build. Controls below describe the intended architecture and operating programme.
Data handling
Prompts and responses never leave the client environment, in any deployment topology. Policy flows down as signed bundles. Telemetry flows up as redacted metadata only. Website form submissions are handled on our web host and emailed to a mailbox controlled by solvly global limited. See the Privacy Policy.
Current posture
- Least-privilege access to company systems; MFA for administrative access.
- Secrets kept out of source control; environment-based configuration for integrations.
- No third-party analytics that ship visitor data offshore on this website.
- Dependency and secret scanning planned as part of the engineering SDLC.
Roadmap
SOC 2 Type I
Target
Not held. Intended as the first formal attestation milestone.
ISO 27001
Target
Not held. Alignment work follows SOC 2 Type I.
ISO/IEC 42001
Target
Not held. Relevant to AI management systems; sequenced after ISMS baseline.
Security enquiries
Write to hello@solvly.ai with subject line “Security”.