Trust Center

Security you can throw your weight behind.

Downward force is only trustworthy if the platform behind it is. Here's how we keep every throw secure, available, and accounted for.

Certifications & attestations

Independently audited.

SOC 2 Type II4 years running
ISO 9001Quality mgmt
ISO 27001Infosec
GDPR & CCPAData rights

Reliability

The ground has perfect uptime. We aim to match it.

99.98%Ground-contact SLA
0Regret incidents, all-time
<0.71sMedian time-to-ground
TLS 1.3Everywhere, always

Live component health, 90-day uptime, and incident history live on our System Status page, never edited after the fact. The full commitment is in our Ground Contact Reliability Agreement (PDF).

Data handling

Subprocessors.

We rely on a few vetted subprocessors. Throw telemetry — apex, velocity, dwell, decibels — is encrypted in transit and at rest; ground-contact certificates are cryptographically signed and immutable. We retain the record, not the object.

SubprocessorPurposeRegion
Northwind CloudPrimary compute & object storageUS · EU · APAC
Gravity, Inc.Downward force provisionGlobal · since inception
Halcyon FreightPhysical certificate deliveryUS · EU
CendrixAudit-ledger notarizationUS
VeralineEmail & status notificationsUS · EU

Gravity has partnered with us since inception and never missed an SLA. A full, versioned subprocessor list is available under NDA.

Vulnerability disclosure

Found a way to yeet the unyeetable?

Report it to security@yeeterprise.com. Verified Do-Not-Yeet registry-bypass findings earn our bounty, payable in credibility and, occasionally, money. Our machine-readable policy lives at /.well-known/security.txt.

Our most important control prevents the wrong throw. See the Do-Not-Yeet registry for the enforced asset classes and how the policy engine blocks a violation before it leaves the hand.