The same governance tooling we sell — applied to ourselves, stated honestly. Where a claim maps to a primitive, you can verify it in the reference architecture or re-derive it with the public Merkle verifier. Where it doesn't yet — like formal certifications — we say "roadmap", not "active".
Our own policies, risk register, attestations, and operational events are managed on the Cognita platform — every state-changing action lands on the hash-chained audit ledger and is Merkle-anchored to S3 Object Lock (COMPLIANCE mode). We don't publish self-reported posture numbers here; ask us for a live walkthrough of the real ledger instead — [email protected].