// /trust
Trust & compliance
trust · compliance · sovereignty
No slogans. Everything your audit / security / compliance team will ask for is on this page.
// 08 · compliance.md
Compliance, security, data sovereignty
evidence, not slogans
No slogans. Just the evidence we can hand over. Nine certifications held. Two in progress.
// 01 · on-prem
On-prem
fully offline · air-gap
Runs fully offline, supports air-gap isolation. Fit for DJCP, finance, energy.
// 02 · private cloud
Private cloud
dedicated vpc
Deploys inside customer VPC. Tenant-isolated. Control plane separable from data plane.
// 03 · multi-cloud
Multi-cloud
cross-cloud control plane
Cross-cloud control plane + local data plane. Azure / AWS / Google / Aliyun / Huawei / Tencent.
// 04 · sovereignty
Data sovereignty
keys stay with you
Customer data can be configured to never leave the boundary. Keys customer-managed. Full audit logging.
// compliance_matrix.mdACTIVEIN PROGRESS
ACTIVE
ITSS®
Cloud Ops Service Capability
MIIT · China
ACTIVE
ISO 9001
Quality Management System
ISO
ACTIVE
ISO 27001
Information Security Management
ISO
ACTIVE
DJCP · Level 3
China Cybersecurity Classified Protection
MPS · mandatory for finance
ACTIVE
HIPAA
Healthcare Data Protection
U.S. HHS
ACTIVE
GDPR
EU Data Protection
European Union
ACTIVE
D-U-N-S®
International Business Registry
Dun & Bradstreet
ACTIVE
Finance Software Cert.
Certified for financial industry
CBIRC · China
2026H2
ISO 27017 / 27018
Cloud Security / Cloud Privacy
ISO · target 2026H2
2027H1
REQUESTSOC2 Type II
Service Organization Controls
AICPA · target 2027H1
Compliance pack
compliance_pack.zip
Request originals + audit whitepapers →
EMAILTalk to compliance
hello@jumborca.com
Direct channel for your audit / security team →
// the auditable AIAny production-affecting decision must be replayable. Every decision carries a unique ID, input snapshot, model version, reasoning path, and signed timestamp. Every edge in the causal graph carries its weight source — historical rehearsal, expert feedback, or public failure database. You can disable AI recommendations at any time and fall back to a traditional rule engine. No lock-in.