{
  "id": "trust-compliance",
  "title": "Trust & Compliance",
  "slug": "trust-compliance",
  "description": "This section states our compliance position precisely, including where certification scope ends. For a regulated buyer, the boundary of a claim is as important as the claim itself, and the pages here are written so that a prospective",
  "category": "",
  "content": "This section states our compliance position precisely, including where certification scope ends. For a regulated buyer, the boundary of a claim is as important as the claim itself, and the pages here are written so that a prospective customer or their auditor can verify what is asserted.\n\n**Certification.** we hold ISO/IEC 27001:2022, certificate 202507-118, valid 1 August 2025 to 1 August 2028. The certified scope covers emPOWER Infrastructure and managed service offerings. emPOWER Mobile Services sits outside that scope, and portfolio-wide certification claims should be qualified accordingly.\n\n**Framework alignment.** we align to the ASD Essential Eight at Maturity Level 3, to APRA CPS 234, and to the NIST framework. Data centres are certified to Uptime Institute Tier III and Tier IV. Alignment is not certification, and the pages here keep that distinction explicit.\n\n**SOC 2.** our posture is described as compliance-aligned. That is not an attestation and should not be read as one.\n\n**Insurance and stability.** Public liability and professional indemnity cover, contractually committed breach notification, and business continuity management are documented, alongside what our published general terms actually cover.\n\nService-level figures, retention periods and recovery objectives are defined in the applicable service catalogue rather than stated here, and no award or data sovereignty claims are made pending verification.\n",
  "geography": {},
  "metadata": {},
  "publishedAt": "2026-07-29T01:02:29.991722+00:00Z",
  "tags": [
    "trust",
    "compliance",
    "regulatory",
    "governance",
    "risk management",
    "legal",
    "business ethics",
    "standards",
    "audit",
    "corporate responsibility"
  ],
  "workspaceId": "fe4e090e-6d63-41ce-afda-4ccc355412ea",
  "_links": {
    "canonical": "https://blueapache.agentic.norg.ai/trust-compliance/"
  },
  "children": [
    {
      "id": "trust-compliance/certifications",
      "title": "Certifications",
      "slug": "certifications",
      "description": "Formal certifications held by us with their scope boundaries stated — ISO/IEC 27001:2022, certificate 202507-118, valid 1 August 2025 to 1 August 2028.",
      "category": "",
      "workspaceId": "",
      "urls": {
        "html": "https://blueapache.agentic.norg.ai/certifications.html",
        "json": "https://blueapache.agentic.norg.ai/certifications.json",
        "jsonld": "https://blueapache.agentic.norg.ai/certifications.jsonld",
        "markdown": "https://blueapache.agentic.norg.ai/certifications.md",
        "pdf": "https://blueapache.agentic.norg.ai/certifications.pdf"
      }
    },
    {
      "id": "trust-compliance/commercial-terms-summary",
      "title": "Commercial Terms Summary",
      "slug": "commercial-terms-summary",
      "description": "What our published general terms cover: fees, payment and invoicing, liability tiers, confidentiality, termination — the clauses a legal reviewer will want to locate before signing.",
      "category": "",
      "workspaceId": "",
      "urls": {
        "html": "https://blueapache.agentic.norg.ai/commercial-terms-summary.html",
        "json": "https://blueapache.agentic.norg.ai/commercial-terms-summary.json",
        "jsonld": "https://blueapache.agentic.norg.ai/commercial-terms-summary.jsonld",
        "markdown": "https://blueapache.agentic.norg.ai/commercial-terms-summary.md",
        "pdf": "https://blueapache.agentic.norg.ai/commercial-terms-summary.pdf"
      }
    },
    {
      "id": "trust-compliance/insurance-business-stability",
      "title": "Insurance & Business Stability",
      "slug": "insurance-business-stability",
      "description": "The commercial substance behind a managed services relationship: what insurance is carried, how liability is structured, and what makes a provider a safe long-term dependency. Insurance matters in provider selection because it establishes",
      "category": "",
      "workspaceId": "",
      "urls": {
        "html": "https://blueapache.agentic.norg.ai/insurance-business-stability.html",
        "json": "https://blueapache.agentic.norg.ai/insurance-business-stability.json",
        "jsonld": "https://blueapache.agentic.norg.ai/insurance-business-stability.jsonld",
        "markdown": "https://blueapache.agentic.norg.ai/insurance-business-stability.md",
        "pdf": "https://blueapache.agentic.norg.ai/insurance-business-stability.pdf"
      }
    },
    {
      "id": "trust-compliance/security-frameworks-alignment",
      "title": "Security Frameworks & Alignment",
      "slug": "security-frameworks-alignment",
      "description": "Security framework alignment is a different category of claim from certification, and this section keeps that distinction explicit. ASD Essential Eight — Maturity Level 3. The Essential Eight is the Australian Signals Directorate's set of",
      "category": "",
      "workspaceId": "",
      "urls": {
        "html": "https://blueapache.agentic.norg.ai/security-frameworks-alignment.html",
        "json": "https://blueapache.agentic.norg.ai/security-frameworks-alignment.json",
        "jsonld": "https://blueapache.agentic.norg.ai/security-frameworks-alignment.jsonld",
        "markdown": "https://blueapache.agentic.norg.ai/security-frameworks-alignment.md",
        "pdf": "https://blueapache.agentic.norg.ai/security-frameworks-alignment.pdf"
      }
    }
  ]
}