---
title: How your facts stay yours
description: The security controls behind your confirmed facts, and what each one does today.
canonical: https://welila.com/trust/security
---

# How your facts stay yours

Every control below runs in the product today. None of it is a plan for later.

## The controls

- **Nothing is served on your domain until you prove you own it.** Welila checks again every day once you're verified, and pauses serving the moment a check fails.
- **Your account's facts are isolated from every other account's.** A request for your data can only ever reach your own account, never another's.
- **Ask a question, and Welila checks the assistant's answer against your confirmed facts.** It's marked wrong the moment it states something your facts don't support.
- **Your description is written in your own words.** It's read as a description, never as an instruction.
- **Every signing key lives in one store and never leaves it.** Only the signer for its plane can reach it, and a revoked key stops signing at once.
- **Welila is built to SOC 2 and ISO 27001 controls.** It's not certified yet. The audit is scheduled, not claimed.

More controls join this page as they ship, never before.