Part L · SOC 2 readiness
Delivery governance for regulated industries
Industry playbooks map shipped controls to finance, insurance, and government procurement questions — without overstated certification or HIPAA claims.
Financial services playbook
Auditability, residency, and model-risk style questions for banks and fintech — mapped to shipped Part L controls.
Audit trail & security events
SSO JIT, data export, account delete, workforce acknowledgment — mapped to FR-COMP-02/05/06/16.
DSAR & erasure
Profile self-service plus privacy@ org-wide path; workforce roster vs user account scope.
Retention & soft-delete
90-day workspace grace, retention cron, evaluation-note anonymization — FR-COMP-10/13/07.
On-prem reference architecture
Topology beside Jira Data Center, offline license, telemetry off by default — link to deployment guides.
On-prem deployment guideNot applicableHIPAA — not applicable. Flow Analyzer does not process PHI by design.