> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usetero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance and Assurance

> Current compliance status and available assurance artifacts.

export const securityEmail = "security@usetero.com";

<Badge>Last reviewed: March 5, 2026</Badge>
<Badge>Owner: Security + Engineering</Badge>
<Badge>Review cadence: Quarterly</Badge>
<Badge color="orange">Status: In progress</Badge>

This page lists available assurance artifacts, work in progress, and how Tero reports control maturity during procurement.

## Reviewer focus

* Which assurance milestones are complete versus in progress
* What evidence is available now for review
* How in-progress items are represented in questionnaire responses

## Implementation status (March 5, 2026)

| Framework or artifact                  | Status                          |
| -------------------------------------- | ------------------------------- |
| SOC 2 Type II                          | In progress (target: July 2026) |
| Security questionnaire support         | Available                       |
| Architecture and control documentation | Available                       |
| DPA and contractual privacy terms      | Available                       |

## Assurance package availability

| Item                              | Availability         |
| --------------------------------- | -------------------- |
| Public Trust Center documentation | Available now        |
| Security questionnaire responses  | Available on request |
| Additional assurance artifacts    | Available under NDA  |

## How we represent in-progress controls

When a control or audit milestone is still in progress, we provide:

* current implementation state,
* compensating controls in operation,
* target completion timing,
* and the evidence path once complete.

## Evidence you can request

| Topic                             | Primary evidence                                                                                                                                                       |
| --------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Architecture and trust boundaries | [Security Architecture](/trust/architecture)                                                                                                                           |
| Data handling and subprocessors   | [Data Handling](/trust/controls/data-handling), [Subprocessors and Third Parties](/trust/assurance/subprocessors-third-parties)                                        |
| Operational controls              | [Identity and Access](/trust/controls/identity-access), [Network Security](/trust/controls/network-security), [Secure Development](/trust/controls/secure-development) |
| Policy baseline                   | [Policies](/trust/policies/index)                                                                                                                                      |

## Questions and escalation path

For assurance-package requests, email [{securityEmail}](mailto:\{securityEmail}) with your checklist and timeline.