Loading...
Loading...
Real-time compliance posture • Auditable evidence • Cryptographic proof
Every control is backed by code, not just policy. Explore our live compliance posture across SOC 2, NIST AI RMF, ISO 42001, and the EU AI Act.
This is a self-assessment, not an independent audit. OmegaEngine evaluates its own controls against these frameworks and is not SOC 2 / ISO 42001 certified. See the full self-assessed report for scope and caveats.
GDPR, CCPA, and international data protection
Service agreement and usage terms
Defense-in-depth technical controls
Severity levels, escalation, and recovery
Per-tier retention windows and compliance
GDPR Art. 28 DPA for enterprise customers
View the full compliance assessment with per-control evidence, framework scores, and attestation. Print-ready for auditors.
Full audit packages with evidence chains and penetration test results available under NDA.
The compliance posture above is self-assessed. This part is not: every Agent Security Attestation we issue is signed with an Ed25519 key and committed to a signed, tamper-evident transparency log (RFC 6962). Anyone can verify one offline — trusting only the public key and the math, never our servers.
# fetch a signed attestation, then verify its Ed25519 signature — offline curl -s https://omegaengine.ai/api/verify/<id> > attestation.json npx @omegaengine/verify attestation.json # ✓ VERIFIED
Found a vulnerability? We reward responsible disclosure of qualifying issues; reward amounts are determined case-by-case based on severity.
Report a VulnerabilityLast assessed: June 28, 2026 • SOC 2 Type II observation period planned • Contact security@omegaengine.ai for audit requests