no — deterministic offline scan; enrich uses your own key; telemetry opt-in
Trustabl is built for AI engineers, platform teams, and security/compliance teams who are building or running agentic systems in production and want tools that are reliable, observable, and policy-compliant.
The open-source analyzer can surface findings that are useful inputs to compliance work, but it does not certify SOC 2, GDPR, PCI, or other compliance on its own. Trustabl Console is the planned commercial layer for compliance mapping and signed governance snapshots.
No. trustabl enrich shows proposed patches for review. It applies changes only when you run with --apply, and the resulting files remain under your normal version-control workflow. Review the diff before committing.
