SECURITY & PRODUCT STATUS
Trust starts
with clarity.
Here is what we can demonstrate today, what needs validation and what we will agree before a customer evaluation.
Where we are today
UPDATED / 18 SEP 2026Core operational workflows
Controls, evidence, policies, people, access reviews, risks, vendors, training and questionnaire workflows are implemented in the development platform. Ask to see the tasks relevant to your team.
GitHub evidence collection
Tested against a live private repository. Permissions and provider features can make collection partial. We confirm the supported sources before an evaluation.
Live AI assistance
Source-linked drafting and human review are implemented. Live API validation is pending. We will confirm availability and data handling before enabling AI for a pilot.
Production readiness
A demonstration is not a production deployment. Hosting, access, backup and recovery, support, security validation and data handling must be agreed and verified before live customer use.
THE AUDIT BOUNDARY
Prepare the evidence.
Keep the auditor
independent.
ControlQuay is software for organising security and compliance work. We do not perform independent audits, issue SOC 2 reports or award certifications.
If your company needs an audit or certification, a qualified independent provider carries out that engagement. We can discuss how your evidence workflow supports that process.
BEFORE A PILOT
Questions we should
answer together.
Where will our data be hosted?
Hosting region, storage and data flows are deployment decisions to be agreed before a pilot. This public website is separate from a customer application environment.
Who will have access to our workspace?
We will define administrator and member access, authentication requirements and support access for the proposed deployment. Do not send credentials or confidential evidence through the demo enquiry.
What will be included in the price?
We will put the supported scope, deployment needs, support and price in writing before a paid evaluation. No public fixed price has been finalised.
Can we report a security concern?
Email [email protected] with a brief description. Please avoid including credentials, customer records or sensitive exploit details in the initial message.
YOUR NEXT REVIEW
Start with the work
you need to get done.
Show us your questionnaire or evidence workflow. We’ll confirm fit, demonstrate the product and scope a pilot in writing.
Plan a walkthrough ↗