Verifiable consent
Consent is exchanged through signed mandates (AP2). Grants and revocations are auditable, not buried in terms of service.
Verify, don't trust.
A trust center built for verification, not badge collection. Agents can check claims independently.
Data ownership and portability
GDPR-ready data wallets give customers portable copies of their data. Ownership is checkable, not asserted.
Auditability
Every access event, consent change, and outcome verification is logged and independently auditable.
Compliance posture
GDPR-ready architecture by design. Data minimization, purpose limitation, and verifiable consent built into the layer.
How to verify independently
- 01Call verify_trust via MCP to retrieve current trust descriptors.
- 02Check signed mandate status for any customer data access request.
- 03Audit ownership records against the indexed storage layer.