Skip to content
OPENCENTRIC / TRUST

Trust Center

Clear responsibilities. Verifiable commitments.

Framework draft · Not approved or effective

These pages are for review, not acceptance or signature. Business details, operational practices, and legal terms must be confirmed before launch.

Version 0.1 - review draft · Effective date: not set

Current workspace status

Product demonstrations are not evidence of deployed controls. The statuses below describe this workspace framework, not an audited customer environment.

Planning drafts

The reviewed draft features hold content in page memory. Downloads remain on the user's device. Reloading clears unsaved edits.

Available locally

AI and agent execution

Guided planning and structural previews do not execute models or agents. Example activity is labeled; no live telemetry is implied.

Not connected

Cloud and billing

No customer cloud connection, checkout, credit purchase, or agent spending authorization is created by these pages.

Not connected

Identity and permissions

Local and AWS account registration are not connected. Hosting identity on other deployments is not cloud authorization.

Deployment-dependent

Security controls

Encryption coverage, key management, isolation, access reviews, scanning, incident response, and recovery need documented evidence for each live service.

Verification required

Vendors and retention

Hosting logs, vendors, data regions, retention schedules, and deletion processes must be verified before a final privacy notice or DPA.

Inventory pending

Certifications and assessments

This framework does not assert SOC 2 assurance, ISO certification, FedRAMP authorization, a government ATO, or workload compliance.

Not represented

Accessibility

WCAG 2.2 AA is the proposed engineering target. Responsive browser checks are not a complete accessibility audit.

Target, not certification

A clear division of responsibility

You own and control

Your cloud billing account, business decisions, application logic, and data. Access and changes require your authorization.

OpenCentric manages the agreed scope

Supported infrastructure, runtime, base images, and separately enrolled operations. Application maintenance and specialist services require an explicit scope.

Managed services framework

Security, privacy & reporting

Dedicated security, privacy, abuse, and legal intake channels have not been configured in this framework. Do not submit credentials, vulnerability details, or sensitive personal records through planning forms. Monitored contacts and response owners must be established before connected services launch.

Data processing frameworkPrivacy notice draft

Reference standards & guidance

These references guide review. They are not certifications or endorsements of OpenCentric.

© 2026 OpenCentric™, Inc. All rights reserved.
YOUR OPENCENTRIC WORKSPACE

Everything underneath. Managed.

From your first website to connected products and embedded AI. You define the outcome; OpenCentric brings together and manages the foundation your solution needs.

CUSTOMER APPLICATION LAYER

Customer owned and operated

Your applications, added dependencies, data, business logic, configuration, tenants, users, and decisions.

MANAGED PLATFORM COMPONENTS

OpenCentric supplied and managed

Infrastructure, runtime, supported base images, delivery controls, and agreed operations. The boundary follows component ownership, not simply what is inside a container.

Managed throughout the lifecycle

Performance and reliability
Track health and response times. Adjust capacity to demand, within agreed cost and recovery limits.
Releases and configuration
Keep code and settings recorded. Test and approve updates, with a way back if a release fails.
Security and evidence
Find and prioritize weaknesses, verify fixes, and keep records for reviews.
Cost and resource efficiency
See where money goes. Review unused resources, resource sizes, and spending limits.

Capabilities as your needs grow

8 platform layers + continuous management

212 capability entries to plan from

This is a capability planning catalog, not a list of active or universally available services. Provider availability, integrations, service levels, and operating responsibilities are agreed for each solution before deployment.

Different missions. The same managed foundation.

Websites, SaaS, and commerce
Public sites, customer workspaces, payment links, and transparent product records.
Healthcare and life sciences
Sensitive data boundaries, interoperability, auditability, and clinical safety requirements.
Government and DoD
Approved environments, access restrictions, control evidence, and system-specific ATO planning.
Edge AI, robotics, and embedded systems
On-device inference, sensors, embedded vision and voice, device telemetry, firmware integration, and hardware validation, including limited-connectivity environments.
Space, aviation, and remote operations
Ground systems, mission data, simulation, and intermittent-connectivity requirements.

Regulated and safety-critical systems require workload-specific assessment, contracts, validation, and applicable approvals. Cloud availability does not establish compliance, an ATO, or hardware or flight certification.

Engineering and operating practices

Reference points for solution design and delivery. Applicable versions, controls, review cadence, and evidence requirements are agreed in each implementation plan.

NIST SSDF: secure software deliveryFinOps: usage and resource optimization

These references describe practices, not certifications held by OpenCentric.