SOC 2 Type II & Sovereign Security Controls

Riven operates a dedicated 5-node sovereign GPU inference fleet and isolated multi-tenant Business Suite (Riven Control, Riven ERP, Riven Mail, Riven Comms, Riven Calendar, Riven Marketing, Riven Realty) with append-only audit logging and zero training on customer prompts or ERP records.

• Zero Training Guarantee: Customer prompts, documents, and ERP records are never used to train foundation models.
• Per-Seat & Per-Tenant Virtual Key Governance: Every human and AI staff seat is metered and rate-limited via Riven Control (X-Riven-Tenant, X-Riven-User-Sub).
• G1–G4 Irreversible Action Gates: Outbound email/syndication (G2) and spend (G3) require cryptographic human approval tokens.
• Blue-Green Zero-Downtime Releases: Every production container is built and verified on Riven SCM (scm.rivenai.io) before traffic cutover.