Skip to main content
Early accessBeta, invite only since 1 Nov 2026. A person reads every application.Apply for an invite
Demystify OS

Trust

How we earn your trust, in the open

The rules we follow when we write about security, and where to find the detail.

Read the Security pageRead the Compliance page

The short answer

Trust here means checkable facts with dates. Security explains the controls, Compliance explains the laws and the audit plan, and each claim on these pages carries a status and the date it was last checked. We do not claim a certification, and we do not publish a number without its basis.

Our rules

How we write about trust

  • Each claim on these pages has a status and a date

    Available means it works for the invited beta today. Early access means it runs but is not in every deployment. Building now means work is under way. Provisioned on request means we set it up for you.

  • Plans are written as plans

    Designed with ISO 27001 and SOC II in mind. Not certified. Audits Q1 2027 (readiness only).

  • We show what we do not know

    Where model calls are processed, and a practised kill switch drill, are open items. They are on the Security page under what we are still working on.

  • A person answers

    Write to hello@demystifysystems.ai. A person is designed to read each message.

The layers

Trust, layer by layer

Trust, layer by layerCustomer records are held in India (Mumbai), with row-level security and encrypted storage. Approvals are designed to keep a person involved.
Trust, layer by layerCustomer records are held in India (Mumbai), with row-level security and encrypted storage. Approvals are designed to keep a person involved. Records in India (Mumbai): Available. Records basis: 4 Nov 2026. Row-level security: Available. Control basis: 4 Nov 2026. Encrypted storage: Available. Control basis: 4 Nov 2026. Human approvals: Early access. Design reviewed: 4 Nov 2026.Records in India (Mumbai)AvailableRecords basis: 4 Nov 2026Row-level securityAvailableControl basis: 4 Nov 2026Encrypted storageAvailableControl basis: 4 Nov 2026Human approvalsEarly accessDesign reviewed: 4 Nov 2026

Designed with ISO 27001 and SOC II in mind. Not certified. Audit readiness target: Q1 2027.

Read the diagram
  • Records in India (Mumbai): Available. Records basis: 4 Nov 2026. This statement concerns stored customer records; it does not describe model-call residency.
  • Row-level security: Available. Control basis: 4 Nov 2026. Record access uses row-level security.
  • Encrypted storage: Available. Control basis: 4 Nov 2026. Stored customer records are encrypted.
  • Human approvals: Early access. Design reviewed: 4 Nov 2026. Approvals are designed to put a person on consequential actions. This is not a guarantee of an outcome.

Report an issue

Report a security issue

Write to hello@demystifysystems.ai or call +91 82802 73456. A person is designed to read each report. Please do not include customer data. Our security.txt lists the same contact.

hello@demystifysystems.ai+91 82802 73456security.txt

Questions

Questions, answered

What does the status on a claim mean?

Available works today in the invite-only beta. Early access runs but is not in every deployment. Building now is under way. Provisioned on request is set up by us for a customer. Each carries a date.

Where is the detail?

Security lists the controls and the journey of one request. Compliance lists the laws and the audit plan.

Can I ask for the evidence behind a claim?

Yes. Write to hello@demystifysystems.ai and name the line. We share what we can and tell you plainly when we cannot.

Keep exploring

Security, trust and compliance

Next step

Apply for the beta

Demystify OS is an invite-only beta. A person is designed to read each application.

Apply for an invite