Security
Phase-one security commitments
Operalith is handling a narrow intake problem in this phase: receive exported CSVs, keep them private, and pass them into a controlled local audit workflow.
Current controls
- Private upload storage only
- CSV exports only
- No credentials collected
- No writes into your operational systems
- Manual review before findings are discussed
Review boundaries
- The audit workflow is intentionally manual in phase one
- Uploaded files are used only for the requested audit review
- NDA support is available before operational data is shared
- Data retention is limited to what is needed for the phase-one review