Access and secrets
Opaque sessions, hashed credentials and API keys, least-privilege service identities, Secret Manager, and scoped organization roles.
Controls we can explain. Claims we can prove.
Pursua uses isolated production infrastructure, private PostgreSQL networking, encrypted transport, restricted secrets, server-side authorization, audit logs, and fail-closed launch gates.
Infrastructure
Cloud Run, private-IP Cloud SQL, Cloud Armor, managed TLS, backups, point-in-time recovery, and immutable container releases.
Honest assurance
Pursua does not claim SOC 2, ISO 27001, or another certification it has not obtained. Independent testing remains a launch gate.