Tenant isolation
Every tenant-scoped query filters by organization inside the SQL predicate, not as a filter applied afterwards. A request for another tenant's object returns not found.
Authentication
Local authentication is rate-limited. Sessions are recorded and revocable. SSO sessions are the same objects as password sessions and are revoked by the same code.
Audit
Governed actions write an audit record, and audit records cannot be given a deletion policy.
External assurance
Some assurance can only be granted by an independent third party, and VoiceInsights does not assert any of it here. The Trust Center is the single governed place where every such item is published with its real status — outstanding items included, named individually, rather than omitted.
Documentation deliberately does not restate those statuses. A second copy of an assurance claim is a copy that can drift, and the one that drifts is always the one somebody quotes.