Trust status
Each entity publishes its live control results, and every reader, human or agent, receives the same data.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC2.3 | The entity communicates with external parties about matters that affect the functioning of internal control. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Detective: it finds the failure after it happens. |
| Select | Every hour of the report period. |
| Assert | The status Interface served results matching the latest Control.tested Events and the published root. |
Owner
Compliance Officer, Legal Team.
Example
A buyer's security Agent reads a payroll-data API's trust page. It receives the same control results a human reader sees, matching last night's Control.tested Events.