Enterprise-grade SQL security

• Credential-free architecture: database credentials never leave your network.
• Deterministic AST evaluation: no ML, no false positives. The same input always produces the same decision.
• Immutable audit log: every decision is recorded and encrypted at rest with AES-256-GCM.
• Role-based access control: four permission levels — Owner, Admin, Member, Viewer.

• P99 < 2ms rule-evaluation latency
• Over 50,000 queries/second per proxy instance
• Zero-downtime rule updates: hot-swap via ArcSwap, no restart required
• Non-blocking telemetry: telemetry never delays the SQL path
• Resource-efficient: 0.5 vCPU / 128MB for production workloads

• SOC2 Trust Services criteria: coverage of CC6.1, CC6.2, CC7.2, CC7.3, CC8.1
• ISO 27001 Annex A controls: A.9.4.1, A.12.4.1, A.16.1.5
• Exportable audit log: CSV/JSON exports for external auditors
• 90-day retention: configurable for enterprises (up to unlimited)
• MTTD < 2ms, inline remediation: the destructive query is blocked automatically before it executes.

On scope: Vericto is a tool that produces evidence for the controls listed; it does not replace an audit, nor does it imply that Vericto S.A.S. is itself SOC 2 or ISO 27001 certified. Your organisation's certification is issued by an independent auditor against your own controls. If your procurement process needs our certification status or a signed DPA, contact enterprise@vericto.com.