Operalytix

We map Operalytix controls onto your existing framework — SOC 2, ISO 27001, HIPAA, GDPR, DORA, NIS2, regional equivalents — so your audit doesn't grow because you added us.Reviewed 2026-10-19View source

For each one they collected and read a thick evidence pack: the vendor's security questionnaire, its SOC 2 report, penetration-test summaries, business-continuity and disaster-recovery plans, financial statements, and the contract — then mapped all of it against the firm's control requirements, flagged the gaps, and assembled a risk assessment for sign-off.Reviewed 2026-10-19View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

- SSO: SAML 2.0 + OIDC.Reviewed 2026-10-19View source

- Provisioning: SCIM 2.0 with group sync.Reviewed 2026-10-19View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

On-prem, in your VPC, or in a sovereign region — your data, your models, your audit trail.Reviewed 2026-10-19View source

### Per-decision audit trailReviewed 2026-10-19View source

Draft Suspicious Activity Report narratives from your case-management data, with the model running inside the bank — no third-party API, full audit trail per decision.Reviewed 2026-10-19View source

Before relying on it
Verify administrative and data-access events, retention and export.

Input data retentionReviewed 2026-10-19View source

Employee app Data Processing Agreement · OperalytixReviewed 2026-10-19View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Threat model, deployment runbooks, incident-response playbooks, model cards, and the binding SLA are available under NDA.Reviewed 2026-10-19View source

For multi-department production deployments with a real SLA.Reviewed 2026-10-19View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

When a real customer authorises a named case study, we replace one of the illustrative entries with the named reference and label it accordingly.Reviewed 2026-10-19View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.