SOC 2TYPE II
SOC 2 Type II
Independent audit of security, availability and confidentiality controls over time.
In progress
SECURITY AND GOVERNANCE
Control over who decides, what they see and where it runs.
Every action in Dendroh is checked against fine-grained permissions. Dendroh is provided as a managed service; enterprise deployment and model requirements are assessed and agreed separately.
TRUST AND SECURITY
Security you can verify. Decisions you can explain.
Every action in Dendroh runs under explicit authority. Access is checked on each object, every finding carries its source, and every decision keeps its history. Our controls are being built towards the standards below.
27001
ISO/IEC 27001
Information security management system, independently certified.
In progress42001
ISO/IEC 42001
Management system for the responsible development and use of AI.
In progressGDPR
GDPR
Personal data processed lawfully, kept to what is needed and under your control.
Designed forDORA
DORA
Operational resilience for EU financial services and their technology providers.
Designed forAuthority and permissions
Fine-grained authorisation built on OpenFGA checks every read, write and decision against who is allowed to act.
Evidence and provenance
Every finding links to its source, its date and the person or agent that used it.
Decision history
Each decision keeps its options, reasoning and approver, and can be revisited without rewriting the record.
01 · AUTHORISATION
Permissions down to the single decision
Dendroh uses OpenFGA for relationship-based access control. Access follows how your organisation actually works: teams, projects, sources and decisions. People and agents are checked the same way.
- Every read, edit and approval is checked
- Agents act only within the authority they are granted
- Each decision records who could make it, and why
02 · DEPLOYMENT
Deployment that fits your organisation.
Dendroh is provided as a managed service. Hybrid and customer-managed arrangements can be explored for enterprise requirements.
STANDARD SERVICE
We operate Dendroh. You focus on the work.
Dendroh operates the platform and its AI infrastructure. Your team works with authorised information, tools and permissions, without managing the underlying service.
Dendroh-operated service
ENTERPRISE ARRANGEMENT
Connect to the systems you already control.
Dendroh operates the platform while connectivity to your organisation's systems is designed around agreed boundaries. Data processing, retention and access are defined as part of the solution.
Agreed boundaries and connectivity
ENTERPRISE ASSESSMENT
Explore deployment in your own environment.
For specific infrastructure or regulatory requirements, we can assess customer-managed deployment. Architecture, support, operational responsibility and availability are agreed case by case.
Deployment by agreement
STANDARD SERVICE
We operate Dendroh. You focus on the work.
Dendroh operates the platform and its AI infrastructure. Your team works with authorised information, tools and permissions, without managing the underlying service.
Dendroh-operated service
ENTERPRISE ARRANGEMENT
Connect to the systems you already control.
Dendroh operates the platform while connectivity to your organisation's systems is designed around agreed boundaries. Data processing, retention and access are defined as part of the solution.
Agreed boundaries and connectivity
ENTERPRISE ASSESSMENT
Explore deployment in your own environment.
For specific infrastructure or regulatory requirements, we can assess customer-managed deployment. Architecture, support, operational responsibility and availability are agreed case by case.
Deployment by agreement
Dendroh manages model selection and inference in its standard service. Specific model or hosting requirements can be considered within an enterprise arrangement.
03 · DATA CONTROLS
Confirm the controls for your deployment.
Model data use
Training and model-provider handling are confirmed against the agreed service configuration.
Encryption
Encryption controls are confirmed as part of the technical and security review.
Processing location
Processing and retention boundaries depend on the agreed deployment arrangement.
Auditability
Required activity, evidence and decision records are defined during enterprise evaluation.
What work could Dendroh take off your hands?
From supplier assessments to voyage evaluations and financial reviews, show us a process that requires research, analysis and judgement. We’ll show you how Dendroh could help.
Book a demo