Everything that lets you check us, in one place
Each entry links to its page and shows the date read from its source. Nothing here is a certification.
Subprocessors and transfers →
Every provider that receives personal data, its region and role — conforming copy of the holding source.
Hosting and regions →
Where data and processing live; regions proven by the code or marked “not proven”.
System card and known limits →
What measurement does not cover, open breaches and what each limit prevents from claiming (system card v3.1).
Declared gaps and measurement transparency →
Results not yet published, slots to be measured, what remains uncovered.
Incidents and behaviour versions →
Public version log, including the drift episode of 27–28 August 2026.
Service status →
Read live from the brain’s public health endpoint, with the deployed version.
Report a vulnerability →
Responsible disclosure policy and security.txt (RFC 9116).
Accessibility →
Accessibility statement: non-compliant for lack of an audit, automatic checks run, limits and contact.
Label withdrawal →
Grounds, time limit, appeal and public register of withdrawn labels; state read by the SDK label at /verify/{appId}.