Working draft for the Founders Program. Contracting entity details, effective dates, and jurisdiction-specific schedules will be completed before general availability.
Current design
API keys are shown once and revocable. Control and data planes have separate responsibilities. Tenant identity flows through authorization, metering, and audit. Secrets stay out of frontend code and standard logs. Data is encrypted in transit with TLS.
Operational controls
Least-privilege access, dependency and image scanning, backup restore testing, and incident classification and notification are production gates. Report security issues to security@titarouter.com.
Roadmap and evidence
The roadmap includes SSO, SCIM, self-service audit export, key rotation, regional controls, and independent security assessments. Certifications or compliance claims will be published only after achievement.
