Most AI products describe their safety. We'd rather show you the control board — what's certified, what's enforced today, and what's still being built. Every control runs on our own operations before a customer ever touches it.
Certification complete. Vetworx Solutions is SDVOSB-certified and building toward federal-grade control profiles.
| Control | Status | What it means in practice |
|---|---|---|
| Human approval gates | ◐ In progress | Privileged agent actions — credentials, spend, production and DNS changes — pause for an explicit human "approved, go." Enforced on our own infrastructure today: this very website's DNS changes each waited for a named person's approval. |
| Least-privilege credentials | ◐ In progress | Agents hold narrowly scoped, deny-guarded credentials — a DNS token that can touch only the zones it manages, cloud roles with permanent deny rails verified against the live policy, then narrowed further from real usage data. |
| Append-only audit trail | ○ Planned | Who approved what, when, under which policy — tamper-evident, retained deliberately per record class, and queryable. Designed before the platform opens, not bolted on after. |
| Tenant isolation | ○ Planned | Every customer's data, agents, and tasks scoped hard to their tenant — a redeploy gate for the platform, not a fast-follow. |
| Per-customer compliance profiles | ○ Planned | The control set flexes by configuration: a federal customer turns everything on; a solo site owner turns almost all of it off. Same platform, your profile. |
Guardrails only mean something if they're anchored to an identity system you trust.
Verify approvals and permissions against your existing directory. Your users, your groups, your conditional access — we integrate, not replace.
Anchor the permission envelope in your own IAM — roles you define, deny rails you can read, credentials that never leave your account's control.
No directory? No problem. Pay for the service and we operate the correct guardrails and permission sets for the tasks being done — MSP-grade, documented, auditable.
An honest "in progress" beats a decorative "certified." Buyers who've been burned know the difference.
We are our own tenant zero. The approval gates, scoped credentials, and audit design on this board are the same ones governing the agents that operate our infrastructure right now — which means by the time they reach you, they've been run in anger, not written for a brochure. As each planned control lands, its row moves — and the evidence moves with it.
Compliance requirements, identity constraints, an auditor with opinions — bring them. That conversation is the product working as intended.
Talk to us