SECURITY MODEL

Minimise what we need to receive.

The Phase 4 scanner processes raw CSV contents inside the browser. The local prototype has no backend receiving those raw files.

Local raw-data analysis

Uploaded CSV contents are parsed and analysed in the browser in this phase.

No AI dependency

The savings engine uses deterministic rules and calculations. No LLM receives customer data.

No automatic changes

The product produces review recommendations. It does not automatically remove, downgrade or reassign licences.

Production work remains

Real authentication, billing, cloud storage, access control, incident procedures and security testing must be completed before production launch.

Phase 4 security statement — not a certification.

This page describes the current architecture. It must not be represented as ISO 27001, SOC 2 or any other certification unless that certification is actually obtained.