Controlled beta
Production controls continue to mature during controlled customer deployments.
TRUST CENTER
Security, privacy, governance, and service transparency.
Review how Operiin protects customer workspaces, workforce information, operational records, decision-support outputs, and account access — including the controls Operiin operates, the providers supporting the service, and the responsibilities customers retain.
Document set: Beta 1.0Published trust documents: 11Active subprocessors: 5Last control review: July 2026
Access scope
Access is governed by authenticated organization, location, role, and user permissions.
Hosting
Primary service regions and supporting provider locations are disclosed below.
Decision support
Operiin outputs require authorized human review.
Assurance
No independent security certification is claimed unless expressly published here.
TENANT ACCESS BOUNDARY
Authenticated user
Organization membership verification
Role and location authorization
RLS-enforced query
Authorized organization records only
SIMPLIFIED DATA FLOW
Customer input
Operiin application
Authenticated service layer
Organization-scoped database
Authorized output
Audit event
DATA LIFECYCLE
Collect → Use → Store → Export → Retain → Delete
DOCUMENT LIBRARY
Operiin trust and service documentation
Each document has a defined purpose. Organization agreements, individual-user terms, data-processing obligations, security controls, and support policies are maintained separately to reduce ambiguity.
11published resources
01
Published
Security Overview
Tenant isolation, authenticated organization scope, row-level security, role permissions, audit records, file controls, and incident-response practices.
02
Published
Privacy Notice
How Operiin handles account, workforce, operational, technical, billing, support, and website information.
03
Beta terms
Terms of Service
The organization-level agreement governing subscriptions, authorized use, customer responsibilities, decision-support boundaries, and platform ownership.
04
Beta terms
End User License Agreement
The individual-user license governing account access, credentials, authorized use, customer-directed processing, and interaction with Operiin outputs.
05
Available
Data Processing Addendum
Processor terms, documented instructions, data categories, security measures, incidents, subprocessors, rights assistance, return, and deletion.
06
Current registry
Subprocessor Registry
Providers supporting infrastructure, authentication, delivery, payments, communication, monitoring, and enabled integrations.
07
Disclosed
Data Location & Hosting
Primary service regions, provider infrastructure, backups, file storage, support access, and international-transfer mechanisms.
08
Published
Compliance & Workforce Governance
Responsibility boundaries, workforce-data governance, human review, retention, employment compliance, and algorithmic-risk controls.
09
Published
Acceptable Use Policy
Rules covering unauthorized access, credential sharing, scraping, reverse engineering, discriminatory use, interference, and improper output use.
10
Target policy
Service Availability & Support
Beta support scope, production availability targets, maintenance, incident severity, exclusions, and custom-service options.
11
Reporting open
Vulnerability Disclosure
Instructions for confidentially reporting suspected vulnerabilities, access-control issues, or unintended data exposure.
Independent assurance: Not currently certified.
Operiin does not claim SOC 2, ISO 27001, or equivalent independent certification. The roadmap below states what operates today, what is being formalized next, and what is planned — without implying an assurance engagement that has not been scoped.
- Controlled-beta security baseline
- Organization-scoped RLS and role access
- Audit-event capture
- Subprocessor inventory
- Security and privacy policy baseline
- Incident-response process
- Formal control inventory
- Evidence-retention procedures
- Access-review process
- Vendor-risk reviews
- Backup and recovery testing
- Internal security assessment
- Independent readiness assessment
- SOC 2 examination scope evaluation
- Penetration testing
- Expanded enterprise assurance documentation
Request documentation or a security review.
Security questionnaire
Vendor questionnaires, control evidence, and architecture questions.
DPA / SCC requestExecutable DPA copies and Standard Contractual Clauses addenda.
Privacy requestAccess, correction, deletion, and other privacy-rights requests.
Subprocessor questionRegistry questions, change notices, and objections.
Vulnerability reportConfidential security reports — see the Vulnerability Disclosure policy.
Other trust questionAnything else — enterprise architecture reviews, NDA requests, procurement.
When requesting, include your work email, organization, role, location count, whether you are an existing or prospective customer, the requested material, and any procurement deadline or NDA requirement. Do not include passwords, authentication tokens, production employee records, payment-card information, or vulnerability exploit details in these requests— sensitive vulnerability information should use the dedicated security-reporting channel. security@, privacy@, and legal@operiin.com route to Operiin’s monitored support inbox during controlled beta.
Changelog
July 15, 2026
All documents · Beta 1.0
Provider identity disclosed (Wenraw Distributors, DBA Operiin); EULA, Vulnerability Disclosure, and Data Location & Hosting published; SLA renamed Service Availability & Support Policy; DPA annexes and SCC availability added; Workforce Decision Governance added; terminology standardized to Optional Modules.
July 9, 2026
Privacy Notice · Terms · DPA · Initial
Initial publication of the consolidated legal document set.
SHARED RESPONSIBILITY
Clear controls. Clear ownership.
- Operate documented platform access controls.
- Maintain organization-scoped data handling.
- Protect service infrastructure and account access.
- Provide documented decision-support methodology.
- Investigate qualifying security incidents.
- Control authorized users, roles, and locations.
- Provide lawful and accurate workforce data.
- Configure applicable labor and operating rules.
- Apply human review before acting on outputs.
- Comply with employment, privacy, and labor law.
TRUST QUESTIONS
support@operiin.comNeed documentation or security review support?
Contact Operiin for beta security questionnaires, privacy requests, subprocessor questions, data-processing questions, or vulnerability reporting.