Trust Centre
The score covers external evidence included in the assessment. Plus and minus precision appears only when confidence and qualification support it.
Bounded collection. Explicit permission. No exploitation or authentication attempts.
What this establishes
The product earns trust by making its boundaries inspectable, not by asking buyers to accept a black box. This page helps you understand how the Overall Signals Grade is formed. The relevant evidence, owner and limit remain available from the same route.
Useful for: security reviewer · board adviser.
How grading works
Exceptional evidence-backed external posture with additional safeguards
Strong to good externally visible controls, with remaining actions kept visible
Mixed controls and material evidence requiring prioritised attention
Weak result, subject to evidence and safety floors
Insufficient evidence for a defensible grade
In practice
Begin here when you need to understand how the Overall Signals Grade is formed. Stay with the domain, relationship or service state named on the page; the task does not widen silently into a different security or product claim.
Shared or provider-managed infrastructure is dependency context and is not automatically customer exposure. Open the relevant report evidence when you need to verify the source, observation time, attribution or qualification behind it.
Complete the step shown on the page, then check the resulting state before moving on. Unknown, unavailable and not-applicable outcomes remain distinct, so absence is never presented as a successful or reassuring result.
Methodology changes interrupt trends until comparable evidence exists. Record the resulting owner, evidence or recovery state where the product provides it, so another person can verify what happened without repeating the task.
What you can rely on
Trust claims remain bounded by their source and current evidence.
Candidate associations are not confirmed vulnerabilities and require target applicability validation.
Shared or provider-managed infrastructure is dependency context and is not automatically customer exposure.
Missing, stale, disputed or unavailable evidence cannot be treated as safety.
Important boundary
Grading methodology supports one defined outcome: understand how the Overall Signals Grade is formed. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Questions answered
This page helps you understand how the Overall Signals Grade is formed.
Domain Signals keeps the source, observation time and evidence state alongside each conclusion. The relevant report view provides the technical detail when you need to inspect it.
Grading methodology supports one defined outcome: understand how the Overall Signals Grade is formed. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Keep exploring