Trust & Risk
Every risk we watch, published.
Trust is a practice. Here's the risk register we run against — and the mitigations we ship for each one.
Technical Risks
Keep the platform up.
Uptime is a design decision, not a wish.
Risk
Provider Outage
Upstream model provider downtime.
Mitigations
- Multi-provider routing
- Automatic failover
- Health monitoring
- Redundancy policies
Risk
Scalability Bottlenecks
Rapid growth causing service degradation.
Mitigations
- Cloudflare edge scaling
- Database optimization
- Caching strategy
- Horizontal scaling
Risk
Cost Overruns
AI token usage exceeding projections.
Mitigations
- Cost monitoring
- Smart model routing
- Quotas and budgets
- Usage alerts
Security Risks
Protect the customer.
Layered defenses across identity, data and prompts.
Risk
Account Takeover
Compromised credentials or hijacked sessions.
Mitigations
- MFA
- Device fingerprinting
- Session revocation
- Security monitoring
Risk
Data Leakage
Unauthorized access or exfiltration of tenant data.
Mitigations
- Encryption at rest + in transit
- RBAC
- Row-level security
- Immutable audit logs
Risk
Prompt Injection
Malicious inputs manipulating model behavior.
Mitigations
- Prompt filtering
- Context isolation
- Output validation
- Agent guardrails
Business Risks
Stay valuable, stay accountable.
Sustained value for customers, community and the ecosystem.
Risk
Competitive Pressure
Fast-moving incumbents and new entrants.
Mitigations
- Rapid innovation
- Marketplace ecosystem
- Enterprise focus
- Community growth
Risk
Regulatory Changes
Shifting AI, privacy and export regulations.
Mitigations
- Compliance reviews
- Legal monitoring
- Governance framework
- Data controls
Risk
Customer Churn
Users leaving for alternatives or losing value.
Mitigations
- Better onboarding
- Strong support
- Feature innovation
- Customer success programs