EU Digital Operational Resilience Act
ICT risk, incident management, operational continuity, and financial-sector provider oversight.
Governance you can inspect
Current assurance data is unavailable. The figures below are withheld until the control register can be verified.
The controls that govern consequential Work in Indwel OS are inspectable here.
—Canonical controls
—Sovereign Cognition
—Framework programs
One control system across Indwel
The full control catalog spans identity, infrastructure boundaries, Evidence, inference, action, continuity, privacy, processing, resilience, and governance requirements. They are native to the Work: they shape what Indwel can access, evaluate, decide, execute, record, and settle.
Control-universe snapshot loading…
Assurance program
Assurance updates
The control estate evolves through published, source-reconciled changes. Development work remains distinct from independently reviewed framework correspondences.
View planned coverageLoading verified publication updates…
Controls for accountable AI work
Indwel brings security, access, evidence, and decision authority into one governed control system. Sovereign Cognition controls govern judgment and action, not merely the information used to produce them.
Each governed act carries its objective, evidence, authority, execution, settlement, and continuity within the same control environment.
Governance by stage
21 controls
All Sovereign Cognition controls are available in the Atlas.
View all Sovereign Cognition controlsEight areas of operational control
One catalog covers infrastructure security, data protection, operational resilience, and the governance of AI decisions and actions.
Standards, regulation, and assurance
Browse standards, regulation, security guidance, and assurance programs in one register. Each entry explains its scope and the distinction between control relevance and reviewed requirement correspondence.
Browse 28 frameworks and inspect their connections to Indwel controls. Individually reviewed requirement links are identified where published.
Future coverage
Planned framework work
These are proposed additions to the mapping program, not part of the 28 published framework references or an assertion of certification or regulatory applicability.
California CCPA / CPRA
Personal information, consumer rights, data governance, and applicable automated-decision requirements.
EU NIS2
Organizational cybersecurity, incident response, resilience, and supplier risk, subject to national implementation.
Evaluate Indwel against the controls and systems you already operate
Indwel fits into the institution’s existing identity, security, monitoring, policy, and evidence systems.
See how Indwel connects to the surrounding enterprise control environment.
Start with principals the enterprise already recognizes
Review how organizational identity, workspace and role boundaries, service principals, human authority, and tenant isolation correspond to the enterprise IdP and access-governance model. Authentication is not treated as a substitute for decision authority.
Keep storage access separate from evidentiary standing
Inspect source identity, custody, freshness, contradiction, supersession, admission, and protected-information handling. A connector, database permission, or retrieved document can make information available without making it admissible Evidence for the Work.
Review what the system can reach and what it is actually allowed to change
Map model, agent, coding, and tool fleets; capability registration and scopes; Cognitive Contracts; human participation; effect levels; budgets; idempotency; observation; and postconditions against the customer’s DLP, policy-engine, egress, software-change, change-management, and incident-response requirements.
Route one act into the control environment already in place
Receipts, canonical events, health, control evidence, and Settlement should support SIEM/security-lake ingestion, audit review, operational investigation, and customer-specific diligence without turning logs into a second source of institutional truth.
Control Atlas
Search the control catalog. Filter by business concern, domain, or class. Open a control to inspect its purpose, operating activities, and relationships to external standards.
Request assurance materials
Browse available request categories, then contact Indwel to discuss the applicable materials and access conditions.
Understanding assurance materials
Control designs describe safeguards built into Indwel. Framework relevance identifies useful technical relationships; published requirement correspondence identifies individually reviewed design links. Operating evidence is supplied only where available and authorized. Certification or attestation, if applicable, must come from the relevant independent issuer.
Availability and scope depend on deployment, shared responsibilities, jurisdiction, confidentiality, and the particular inquiry. Use the Indwel contact form to begin a conversation. Framework and control email links include the selected reference in the draft message.
Examples of assurance materials
Discuss the materials relevant to your review. Access depends on scope and authorization.
Ask what governs the system
Ask about model-provider access, Evidence admission, capability and permission, correction, continuity, privacy, or a procurement requirement. Ask Indwel answers from the same published control estate.
If inference can shape the work, the whole act must remain governed.