Platform Architecture
Evidence extraction by models. Risk decisions by deterministic code.
Bastion Ledger separates unstructured document reading from governance tiering. Every supplier assessment produces an immutable cryptographic audit trail linking public attestations, targeted vendor delta answers, and version-pinned rule evaluations.
End-to-End Lifecycle
Four decoupled subsystems working from a single supplier graph.
Intake routes itself in Slack or Jira.
Requesters answer four plain-language questions on data sensitivity, identity scope, production reach, and annual spend.
Low-impact renewals auto-clear with recorded rationale; high-impact processors open a scoped technical dossier immediately.
Bastion inspects public evidence first.
Before emailing your supplier, the engine crawls trust portals, certificate transparency logs, DNS security records, and SOC 2 bridge letters.
78% of baseline controls resolve with page-level citations, leaving an average of 11 targeted delta questions for the vendor.
Deterministic tiers your auditors can verify.
Language models extract citations, never stochastic risk grades. Every supplier lands in Critical, Elevated, Standard, or Minimal via a version-pinned rule tree.
Export a SHA-256 signed decision receipt twelve months later showing the exact policy version and compensating controls.
Drift reopens the review before renewal.
Sub-processor additions, expiring ISO certificates, or TLS regressions automatically trigger a scoped delta check.
Catch new non-EEA sub-processors inside your 30-day contractual DPA objection window without manual calendar reminders.
Deterministic Governance Core
Try the live rule tree simulator.
Adjust supplier classification inputs below to see how Bastion Ledger computes reproducible tiers, compensating control deductions, and scoped questionnaire counts.
Interactive Policy Tree Simulator · policy_v14
Toggle supplier facts to inspect deterministic tier output
1. Data Classification Scope
2. Identity & Deprovisioning Boundary
3. Public Attestation Currency
4. Sub-Processor Hosting
RULE INDEX
35 pts
DELTA QUESTIONS
4 sent
Evaluated Rule Nodes
- ▸DATA_PII_REGULATED (+50)
- ▸COMPENSATING_SAML_SCIM (-15)
- ▸UNQUALIFIED_SOC2_VERIFIED (+0)
Auto-verified via SOC 2 citation + DPA check
Policy commit: policy_v14 · sha256:6d19...a02f
Continuous Drift & Security Isolation
Zero-training data custody across Frankfurt & Zurich.
Annual point-in-time reviews go stale within weeks. Bastion Ledger monitors public sub-processor tables, attestation windows, and DNS/TLS posture every 12 hours. Every uploaded SOC 2 report, penetration test summary, and DPA contract is encrypted with per-tenant envelope keys and never shared across customer tenants.
SOC 2 Type II
Unqualified annual attestation covering Security, Availability, and Confidentiality criteria.
ISO/IEC 27001:2022
Certified Information Security Management System audited by an accredited European registrar.
EU & Swiss Residency
Primary workspaces pinned to Frankfurt (eu-central-1) or Zurich (eu-central-2) with envelope KMS isolation.
Zero Foundation Training
Contractual DPA guarantee that zero uploaded reports or supplier answers ever train external models.
