THE STUFFS COMPANY / TRUST
Trust Center / Governance
Accountability with a human in the loop.
We combine engineering controls, documented review and accountable human decisions. The practices below describe our approach; they do not imply an external assurance program.
Reviewing access policies
RLS policies are examined with test cases for roles and users. Automated tests and AI-assisted analysis support the review; an internal auditor reviews the evidence and approves policy changes. The exact review scope depends on the system and change.
Roles and responsibility
Engineering teams implement and test controls. A human reviewer evaluates results and authorizes security-sensitive changes. Product and customer responsibilities are defined by system design and applicable agreements.
Certification distinction
All team members hold individual certifications related to ISO/IEC 27001. No organization-wide ISO/IEC 27001 certification is claimed for The Stuffs Company.
Corrections
We review public Trust Center statements before publication and when material practices change. Questions or requests to correct a statement can be sent to hello@thestuffs.company.