Security & Trust
Provable by design — not promised
Wefttora was built governance-first: 114 machine-checkable standards, 6 regulatory frameworks, and two review boards that gate every publish — so agents are safe to run against your systems of record.
Governed by construction: named standards, real frameworks, and boards that gate go-live.
Frameworks & standards
The frameworks we enforce — by name
Most vendors say 'enterprise-grade' and name nothing. Here is the actual coverage: the frameworks your auditors ask about, and the machine-checkable standards each hop is validated against.
Plus 114 machine-checkable standards across every vertical — FHIR R4, X12 837/835, ACORD, ISO 20022, GS1 GDSN, EPCIS, NCPDP, DSCSA, XBRL, SBOM (SPDX/CycloneDX) and OSCAL among them — each validated on the hop it applies to, inbound and outbound.
Review boards
Two boards gate every publish
You build and iterate freely. What's governed is the moment something goes live: an architecture review and an AI review must pass first. Tier- and policy-configurable.
Architecture review
Every publish is checked for pattern, integration, and system-of-record fit before it can go live — so what ships matches how your estate is meant to run.
AI review
Model use, data boundaries, and safety are reviewed independently. Higher-risk tiers require sign-off before an agent is allowed to publish.
The controls
Human-in-the-loop, always
Every push to a system of record stops at a review gate. Sensitive actions can require dual control — two people, not one.
Data-loss prevention
Content is scanned and scrubbed on the way in and on the way out. A DLP block halts the run before generation or delivery.
Tenant isolation
Row-level security on every table; your data, rules, and agents are invisible to any other tenant — including in shared infrastructure.
Complete audit trail
Every run, review, edit, approval, and delivery is recorded with who, what, and when — exportable for your auditors.
Risk-tiered governance
Actions are tiered by risk; higher tiers add approval steps automatically. Macro-bearing files are never executed — their logic is independently recomputed and verified.
Data residency
Regional processing options, residency-aware delivery holds, and OCR/extraction routed by residency policy.
Deployment
Run it where your policies require
Wefttora cloud
Fully managed, fastest start. Standard connectors run on operator-provisioned accounts.
Partner cloud
Operated by your systems integrator or OEM partner on their infrastructure.
Your cloud
AWS, Azure, GCP, or Oracle — your subscription, your controls, platform license only.
On-premises
A runner in your datacenter executes locally; nothing operational leaves your environment.
Security review?
We'll walk your security team through the controls, tenancy model, and audit surface.