Tenant isolation
Every tenant-owned record carries an organization identifier. Backend routes enforce membership and role permissions.
Human approval
Vigilo does not make production changes. Remediation plans are manually tracked and require explicit decisions.
Accountable AI
Generated recommendations store organization, user, model, prompt version, timestamp, and output.
Secret hygiene
Secrets are supplied through environment variables. Passwords use modern one-way hashing and are never stored in plaintext.
Traceable proof
Proof packets are built from current evidence, drift, remediation workflow, and audit history.
Honest guidance
The product uses cautious compliance language and does not claim legal advice, guaranteed compliance, or complete protection.