Trust Centre
The controls are in the ledger, not in the process.
A control that depends on somebody remembering is not a control. Everything here is enforced where it cannot be routed around — in the database, in the key material, or in the chain — and every one of them is demonstrable in the product rather than described here as an intention.
Security
Where the controls live, and why they are in the ledger rather than the process.
Data handling
What we hold, where it lives, how long it stays, and how erasure works.
Subprocessors
Who else touches the data, and what for.
Availability
How the platform is deployed, and what we will not claim about uptime.
Incident response
How we find out, what we do, and when you hear from us.
Compliance
What exists, what does not, and why we say so.
Data Processing Agreement
What the DPA covers, so counsel can scan the structure before asking for the document.
AI disclosures
What the system is, what it will not do, and who decides.
The same controls, as a single page a security officer can read end to end: Security and tenancy.
What this Trust Centre does not claim
Not one certification, attestation report or compliance framework is named anywhere in it. No uptime percentage either. Both omissions are deliberate, and the compliance page says why in plain terms.
Diligence questionnaires, penetration-test arrangements and data-processing terms all go to the same address: sales@mindhyve.ai. A person answers it.