Security & control

Clear boundaries.
Evidence before assurance.

Institutional use requires more than an attractive interface. We discuss the actual environment, access boundaries and operating evidence before agreeing any use of confidential information.

Alpha · Product in development. Current product status

Discuss your workflow privately

Alpha · Product in development.

Ma’at is in alpha. We are developing and testing the product and speaking with teams about focused evaluations. Walkthroughs take place in private meetings. Availability, controls and data terms must be agreed for each evaluation; this website is not approval for confidential institutional use.

Public statement reviewed 28 October 2026. This is a product-stage statement, not a security certification.

The boundaries we build around.

These principles describe the intended product. Their implementation must be demonstrated for the environment and scope being evaluated.

Purposeful access

People should see and act on only the relationships, entities and information their responsibilities require.

Private assessments

A company’s outgoing response and the receiving team’s internal findings are different information. Sharing one does not grant access to the other.

Human responsibility.

Assistance can help prepare work. Accountable people retain authority for reviews, approvals and the conditions attached to them.

Agree the evidence you need.

A private review should cover the proposed use, the people involved and the proof needed to support it. A demonstration is not approval for production or confidential-data use.

01

Scope and authority

Identify the responsible parties, permitted information, authorised users and decisions that remain with your team.

02

Controls and operation

Review access enforcement, document handling, logging, provider arrangements, recovery and incident responsibilities for the candidate environment.

03

Terms and acceptance

Agree processing, retention, support and commercial arrangements. Record unresolved gaps before deciding whether an evaluation can proceed.

Specific claims need specific evidence.

Does Ma’at claim certifications or licences here?

No certification, regulatory licence or bank-payment execution service is claimed on this website. A future assurance statement must identify the actual entity, scope and evidence behind it.

How is AI used?

AI assistance is not decision authority. Any evaluation must agree which information may be processed, the applicable provider terms and the evidence available for source-linked assistance.

Can we review the product and controls?

Where there is a fit, we arrange a private meeting using fabricated or otherwise agreed non-confidential information. Confidential material requires separate agreement and demonstrated controls.

Start with a review
worth improving.

Bring a recurring workflow, the people responsible and an outcome worth testing. We’ll work through where Ma’at could help.

Discuss an institutional pilot
Security & control | Ma’at