Security & Trust

Your data is your defense.
Keep it that way.

Forge evaluates risk strictly within the boundaries of your enterprise. We never train public models on your project data.

Data Sovereignty & Egress Isolation

Anchor your environment to sovereign jurisdictions across EU (Frankfurt GDPR/BDSG), UK (Crown Commercial London), US (FedRAMP High), Zurich, or Sydney with strict cross-border egress locks.

Customer-Managed Keys (CMEK)

Retain absolute cryptographic root of trust. Integrate your own AWS KMS Key ARN with FIPS 140-2 Level 3 HSMs. Revoking key access triggers immediate cryptographic shredding.

Tamper-Evident Audit Ledger

Every CPM recalculation, evidence triage decision, and dispute bundle is cryptographically sealed into a SHA-256 hash chain with live zero-tampering verification.

Isolated Environments

Every client project operates in a mathematically isolated vector space. Cross-tenant data contamination is structurally impossible.

Zero Public Training

Your daily logs, meeting minutes, and financial baselines never leave your instance to train foundational LLMs.

Multi-Tier Clean-Room RBAC

Strict 8-tier RBAC with field-level redaction automatically sanitizes contractor profit margins, labor multipliers, and legal advice from external eyes.