Security Posture
Transparent security information for NeuralMind. No uptime theater — just the facts security teams ask about.
Latest Release
Software Bill of Materials
A CycloneDX SBOM is generated for every release.
Download SBOM (JSON) for v3.0.2 →Source Integrity
Verify the tarball integrity against the release SHA-256:
curl -sL https://github.com/dfrostar/neuralmind/archive/refs/tags/v3.0.2.tar.gz | sha256sum
Compare against the SHA-256 on the GitHub release page.
Vulnerability Reports
Last report: — (none received to date). Responsible disclosure welcome.
Compliance & Certification
Architecture supports, certification is yours
NeuralMind's architecture supports GDPR, SOC 2, HIPAA, and ISO 27017 requirements. We provide the evidence (audit trail, SBOM, hash chain); certification is maintained by the operator. See COMPLIANCE-SUMMARY.md.
Next certification target: SOC 2 Type I — Q3 2027
Audit Trail
Every query is logged with a per-user actor attribution, stored locally in an append-only SHA-256 hash chain. The trail is tamper-evident, searchable, and exportable in JSONL/CEF formats.
This page is updated quarterly, or on significant security events.
View on GitHub →