Deloitte 10X Analyst

TrueServe now has an enforceable engineering baseline for SOC 2, HIPAA, GDPR, PCI DSS 4.0.1, CCPA/CPRA, CSA STAR, ISO/IEC 27001, and ISO/IEC 42001.Reviewed 2026-10-24View source

| `commercial-regulated-us` | Active in source | Commercial US security, SOC 2, CSA STAR, ISO 27001, and ISO 42001 engineering boundary.Reviewed 2026-10-24View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

- Tenant isolation.Reviewed 2026-10-24View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

Before relying on it
Verify administrative and data-access events, retention and export.

Verify MFA, vulnerability blocking, registry referrer support, SBOM/provenance/signature acceptance, independent AI approval, and the customer-specific BAA, DPA, or PCI AOC evidence.Reviewed 2026-10-24View source

"DPA": { "evidence_id": "GRC-DPA-18" }Reviewed 2026-10-24View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

| Security | Encryption/key class, audit class, workload class, vulnerability SLA, backup and recovery class.Reviewed 2026-10-24View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.