Compliance and Security Overview
This Trust Center provides transparent visibility into Obscurae Intelligence, Inc. (d/b/a FalsiFind)'s security, compliance, governance, and trust documentation, giving your procurement and security teams everything they need in one place.
Subprocessors
Third parties that process data on our behalf under strict contractual safeguards.
Amazon
Amazon Web Services. FalsiFind holds an AWS account that is empty today: no production workload, customer data, or company data runs there (Hamed Sahil, 2026-10-10). A production-ready Terraform deployment in a private GitHub repository can deploy the platform to AWS for a client on request; it was live for testing earlier and is not running now. Outside the operating scope until deployed (Hamed Sahil, 2026-10-10). Not a GDPR sub-processor or SOC 2 subservice organization today; becomes both on the first deployment that holds customer data, which triggers 30 days' notice to customers under D30. Tier 3 now, Tier 1 once deployed.
Dropbox
A secure document sharing and tracking platform used for business communications.
Microsoft
Microsoft 365 and Microsoft Entra ID: company email, documents, and staff sign-in. Conditional Access requires MFA for all users and for privileged roles and blocks legacy authentication (Comp AI connection icn_6ad21cfae50ee4aadf531522, connected 2026-10-16). Entra ID single sign-on is also on in production (CTO answer 6, 2026-10-16). Company data, no customer media. Ordinary vendor, not a GDPR sub-processor. Tier 2.