Infrastructure
The platform is built on Microsoft Azure, using Azure Static Web Apps, Azure Functions, and Azure SQL. A technical review should establish your hosting, data location, encryption, backup, and recovery requirements.
Identity and firm boundaries
Access uses authenticated accounts and firm-scoped authorization. Review the roles, identity configuration, and access-review process needed by your organization. Existing accounts do not imply access to another firm’s records.
AI governance
The platform’s model-router architecture applies firm policy to AI requests and records model usage. Your evaluation should cover permitted providers, sensitive information, source context, and the actions that require a person’s approval.
Review and evidence
Audit history and review workflows are part of the product’s security design. Confirm the events captured, export format, retention period, and availability of each workflow for your firm. Quarterly access reviews, exam packs, and privacy-request tracking are listed with their current public status in the Trust Center.
Assurance and availability
This overview is not an independent assurance report or a certification. It does not establish a completed SOC 2 examination. Ask us for the evidence available for your review and confirm which controls are deployed before relying on them.
Reporting a concern
Email hello@mudanza.io with a brief description of the concern and the affected page or workflow. Do not include credentials or confidential client information. Ask us for a suitable way to share sensitive details.
Have a security question?
Tell us what your firm needs to evaluate. For a security concern, start with a brief description and ask for a suitable way to share sensitive details.
hello@mudanza.io