{"schemaVersion":"corex.trust-center.v1","checkedAt":"2026-10-16T08:48:28.680Z","release":{"gitCommitSha":"5ce003d3ea79320efdb744ada951451b3bf5d2ba","gitCommitRef":"main","deploymentId":"dpl_9D4R27ngA3bH1ceF7eTP7zeK31RG","vercelEnvironment":"production"},"platform":{"overall":"OPERATIONAL","capabilities":{"active":154,"ready":31,"gated":1,"total":187},"trustRails":{"credentialPersistence":"ACTIVE","historicalIntegrity":"ACTIVE","independentLedger":"ACTIVE"},"identity":{"browserHuman":"ACTIVE","serviceOidc":"ACTIVE"},"interoperability":{"oid4vci":"READY_TO_ACTIVATE","oid4vp":"READY_TO_ACTIVATE","w3cVc20":"AVAILABLE_PROJECTION","sdJwtVc":"VERSION_PIN_REQUIRED","isoMdoc":"VERSION_PIN_REQUIRED","qualificationClaimed":false}},"standards":[{"standardRef":"ISO-IEC-27001:2022","title":"Information security management systems","edition":"2022","publisher":"ISO/IEC","category":"MANAGEMENT_SYSTEM","status":"CERTIFICATION_TARGET"},{"standardRef":"ISO-IEC-27701:2025","title":"Privacy information management systems","edition":"2025","publisher":"ISO/IEC","category":"MANAGEMENT_SYSTEM","status":"TARGET_ALIGNMENT"},{"standardRef":"ISO-IEC-42001:2023","title":"Artificial intelligence management systems","edition":"2023","publisher":"ISO/IEC","category":"MANAGEMENT_SYSTEM","status":"TARGET_ALIGNMENT"},{"standardRef":"ISO-22301:2019","title":"Business continuity management systems","edition":"2019","publisher":"ISO","category":"MANAGEMENT_SYSTEM","status":"TARGET_ALIGNMENT"},{"standardRef":"ISO-IEC-20000-1:2018","title":"IT service management systems","edition":"2018","publisher":"ISO/IEC","category":"MANAGEMENT_SYSTEM","status":"REFERENCE"},{"standardRef":"ISO-IEC-15408","title":"Common Criteria security evaluation framework","edition":"current","publisher":"ISO/IEC","category":"PRODUCT_SECURITY","status":"REFERENCE"},{"standardRef":"ISO-IEC-24760","title":"Identity management framework","edition":"current","publisher":"ISO/IEC","category":"DIGITAL_IDENTITY","status":"REFERENCE"},{"standardRef":"W3C-VC-2.0","title":"Verifiable Credentials Data Model 2.0","edition":"2.0","publisher":"W3C","category":"CREDENTIAL_INTEROPERABILITY","status":"TARGET_ALIGNMENT"},{"standardRef":"OPENID4VCI-1.0","title":"OpenID for Verifiable Credential Issuance","edition":"1.0","publisher":"OpenID Foundation","category":"CREDENTIAL_INTEROPERABILITY","status":"TARGET_ALIGNMENT"},{"standardRef":"OPENID4VP-1.0","title":"OpenID for Verifiable Presentations","edition":"1.0","publisher":"OpenID Foundation","category":"CREDENTIAL_INTEROPERABILITY","status":"TARGET_ALIGNMENT"}],"certificationClaim":{"state":"ALIGNMENT_ONLY","allowedClaims":["Designed for alignment with documented standards and controls"],"prohibitedClaims":["ISO certified","accredited","certified to ISO"],"reason":"No verified certification record is registered."},"legal":{"publisher":{"legalName":"Fennorica Oy","businessId":"3434751-2","country":"FI"},"publicationStatus":"MANAGEMENT_APPROVED_COUNSEL_REVIEW_PENDING","versions":{"masterDpa":"FENNORICA-COREX-DPA-2026-09-22-V2","privacyNotice":"COREX-PRIVACY-NOTICE-2026-09-22-V1","toms":"COREX-TOMS-2026-09-22-V1","retention":"COREX-RETENTION-2026-09-22-V1","subprocessors":"COREX-SUBPROCESSORS-2026-09-22-V1","transfers":"COREX-TRANSFERS-2026-09-22-V1","roleMatrix":"COREX-ROLE-MATRIX-2026-09-22-V1","dataInventory":"COREX-DATA-INVENTORY-2026-09-22-V1","tenantScheduleTemplate":"COREX-TENANT-DP-SCHEDULE-TEMPLATE-2026-09-22-V1","processingScheduleTemplate":"FENNORICA-COREX-PROCESSING-SCHEDULE-2026-09-22-V1","dpiaTemplate":"COREX-DPIA-2026-09-22-V1","shopifySchedule":"COREX-CONNECT-SHOPIFY-SCHEDULE-2026-09-22-V1"},"documents":[{"label":"Master DPA","href":"/legal/dpa","status":"MANAGEMENT_APPROVED_COUNSEL_REVIEW_PENDING"},{"label":"Privacy & processing notice","href":"/legal/privacy","status":"PUBLISHED_OPERATIONAL_MIRROR"},{"label":"Subprocessor register","href":"/legal/subprocessors","status":"PUBLISHED_OPERATIONAL_MIRROR"},{"label":"Platform status","href":"/status","status":"LIVE_PUBLIC_EVIDENCE"},{"label":"Performance & scale","href":"/performance","status":"LIVE_PUBLIC_EVIDENCE"},{"label":"Capability map","href":"/capabilities","status":"LIVE_PUBLIC_EVIDENCE"}]},"operatingEvidence":{"serviceObjectives":{"schemaVersion":"corex.service-objectives.public-status.v1","state":"DRAFT_NOT_APPROVED","approved":false,"objectiveCount":5,"configuredTargetCount":0,"timeSeriesBackendBound":false,"targetValuesDisclosed":false,"contractualSla":false,"publicAvailabilityCommitment":false,"historicalPerformanceClaim":false,"disclosure":"PUBLIC_SAFE_OBJECTIVE_STATE_NO_TARGET_VALUES_NO_PRIVATE_MEASUREMENTS"},"operationalMeasurement":{"schemaVersion":"corex.operational-measurement-source.public-status.v1","state":"UNBOUND","bound":false,"approved":false,"providerType":null,"providerIdDisclosed":false,"approvalRefDisclosed":false,"contractualAuthority":false,"disclosure":"PUBLIC_SAFE_MEASUREMENT_BINDING_STATE_NO_PROVIDER_IDENTIFIER_NO_MEASUREMENT_VALUES"},"deploymentTopology":{"schemaVersion":"corex.deployment-topology.public-status.v1","state":"TOPOLOGY_EVIDENCE_INCOMPLETE","approved":false,"runtimeRegionObserved":true,"primaryDataRegionDeclared":false,"topologyMode":"UNDECLARED","permittedRegionCount":0,"dataRegionAllowed":false,"runtimeRegionDisclosed":false,"dataRegionDisclosed":false,"providerIdentityDisclosed":false,"approvalRefDisclosed":false,"dataResidencyGuarantee":false,"sovereignCloudClaim":false,"disasterRecoveryClaim":false,"disclosure":"PUBLIC_SAFE_TOPOLOGY_STATE_NO_REGION_IDS_NO_PROVIDER_IDS_NO_PRIVATE_APPROVAL_REFERENCES"},"performance":{"schemaVersion":"corex.performance-evidence.v1","capability":"PERFORMANCE_AND_SCALE_EVIDENCE","state":"ARCHITECTURE_READY_BENCHMARK_RAIL_ACTIVE","currentRuntime":{"provider":"VERCEL","nodeVersion":"v22.23.2","architecture":"x64","deploymentEnvironment":"production","gitCommitSha":"5ce003d3ea79320efdb744ada951451b3bf5d2ba"},"evidencePolicy":{"levels":["ARCHITECTURE_READY","MEASURED","REPRODUCED","CERTIFIED_BENCHMARK"],"scaleProjectionsAreClaims":false,"modeledScaleClass":"MODELED_NOT_MEASURED","publishExactThroughputOnlyWhenApproved":true,"synchronousAndAsynchronousThroughputSeparated":true,"providerCeilingsSeparatedFromCorexSoftwareCapacity":true},"scalability":{"architecture":"HORIZONTALLY_SCALABLE_PROVIDER_NEUTRAL","dimensions":["application_nodes","cpu_and_memory_per_node","worker_concurrency","network_bandwidth","database_compute_and_iops","connection_pool_capacity","queue_and_event_delivery_capacity","signer_capacity","cache_and_read_projection_capacity","regional_distribution"],"effectiveCapacityRule":"MIN(compute,persistence,signer,network,queue,external-provider)","externalAnchoring":"ASYNC_SEPARATE_PROVIDER_BOUNDARY_WHERE_POLICY_ALLOWS"},"historicalClaim":{"claim":"60,000-5,000,000 transactions/credentials per second","state":"HISTORICAL_REVALIDATION","currentPublicApproval":false,"rule":"Do not publish as a current production throughput claim until workload-specific evidence is reproduced and approved."},"workloads":[{"id":"corex.primitive.canonical-hash","name":"Canonical credential hashing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-sign","name":"Ed25519 credential signing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-verify","name":"Ed25519 credential verification","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.durable.credential-issuance","name":"Durable credential issuance","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"EPHEMERAL_POSTGRES"},{"id":"corex.durable.public-verification","name":"Persisted credential verification","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"READ_ONLY_AFTER_SYNTHETIC_ISSUANCE"},{"id":"corex.runtime.http-read","name":"CoreX HTTP read path","lane":"RUNTIME","state":"ACTIVE","sideEffects":"GET_ONLY"},{"id":"corex.distributed.scale-out","name":"Distributed horizontal scale","lane":"DISTRIBUTED","state":"DEFINED_REQUIRES_CONTROLLED_MULTI_NODE_RUN","sideEffects":"CONTROLLED_BENCHMARK_ENVIRONMENT"},{"id":"corex.external.kms-sign","name":"External KMS signing","lane":"EXTERNAL_PROVIDER","state":"DEFINED_PROVIDER_BOUND","sideEffects":"EXTERNAL_PROVIDER_CALLS"},{"id":"corex.external.integrity-anchor","name":"External integrity anchoring","lane":"EXTERNAL_PROVIDER","state":"DEFINED_ASYNC_PROVIDER_BOUND","sideEffects":"TESTNET_OR_CONTROLLED_PROVIDER_ONLY"}],"publishedResults":[],"disclosure":"PUBLIC_SAFE_PERFORMANCE_GOVERNANCE_NO_SECRETS_NO_PROVIDER_CREDENTIALS"},"observability":{"schemaVersion":"corex.observability.v1","traceContext":"corex.w3c-trace-context.v1","propagation":"W3C_TRACE_CONTEXT","correlationHeader":"X-CoreX-Correlation-ID","structuredTelemetry":true,"providerNeutral":true,"payloadLogging":false,"authority":{"telemetryIsObservationOnly":true,"authorizationAuthority":false,"sourceAuthority":false,"trustAuthority":false}}},"disclosures":["No certification claim is made unless a verified certification record exists.","Management-approved legal documents do not imply external counsel review is complete.","Service objectives, measurement providers and deployment-locality claims remain limited to their live approved state.","Public trust evidence excludes secrets, private identifiers and internal authority credentials."],"authority":{"trustCenterCreatesCertificationAuthority":false,"trustCenterCreatesLegalAuthority":false,"trustCenterCreatesProviderAuthority":false,"trustCenterCreatesDeploymentAuthority":false,"sideEffects":false}}