Trust center / 01Current posture

Trust starts with clear boundaries.

What Ionia controls, what depends on providers, and where formal assurance work is still underway.

Provider assurance is useful.
Scope still matters.

We separate Ionia-controlled commitments from vendor-controlled assurance instead of presenting the entire stack as one certification.

In progress

Ionia is preparing for SOC 2 readiness. We do not claim an Ionia SOC 2 report until an independent audit is complete.

Provider controls

Ionia runs edge infrastructure on Cloudflare. Provider assurance supports the platform but does not replace Ionia’s own controls.

Stripe-scoped

Payments are handled through Stripe. Ionia does not claim a separate PCI DSS audit and does not intentionally store full card numbers.

Published

Privacy and service terms distinguish Ionia-controlled commitments from third-party platform behavior.

POLICY SET / PUBLIC