Specific about the boundary - careful about the claim.
Alpha boundary
The marketing site demonstrates an alpha product using synthetic data. It is not a production customer-data environment, and visible fixture labels remain part of the product boundary.
Human authority
AI-assisted output is non-authoritative by design. Drafting, mapping, and flags enter a human review process; named people retain approval and export authority.
Standards-aware design
Operating controls are designed with ISO/IEC 27001 and ISO/IEC 42001 in view. RegAtlas does not publish a product or legal-entity certification claim without a reviewed scope and certificate evidence packet.
Development discipline
The codebase uses type checks, automated tests, linting, and boundary checks. Release evidence should remain tied to the reviewed source revision.
Responsible disclosure
Report a suspected security issue to contact@regatlas.eu. Do not include exploit code or sensitive third-party data in the first message.
Evaluation requests
Deployment, subprocessor, assurance, and certification-scope details are shared only when they have been reviewed for the specific product and legal entity. A standards reference is not presented as a certification claim.