Trust you can check

Neutral by construction. Every decision on the record.

SOC 2 Type II · audited controls
ISO 27001 · certified information security
01 · Neutrality

Nothing to favor but your order

Burq owns no drivers and no vehicles, it is neutral by design. When Burq makes a decision for your orders, the only interest in the room is yours.

02 · The record

Nothing happens off the record

Every decision writes a Decision Ledger entry before anything moves: what was chosen, who held the authority, and what happened. Outcomes are graded against the entry, never against hindsight. Accountability is a property of the record, not a promise.

The decision

What was chosen, and what it beat

Every option priced, the committed one marked, the declined ones kept. A choice you can judge against its alternatives.

The authority

Who decided, on every entry

Manual, Shadow, Review, or Autonomous: the mode is written into the record. Accountability is never reconstructed after the fact.

The outcome

Graded, wins and misses alike

What actually happened is written back against what was predicted. Wrong calls are part of the record, not exceptions to it.

03 · Hard limits

What it will never do

Guardrails are not settings buried in a menu. They are properties of how the engine is built.

Never act outside your authority

No action commits beyond the mode you granted that segment. The ceiling you set is the ceiling it has.

Never bypass a policy you wrote

Your rules bind the engine. They are constraints it obeys, not suggestions it weighs.

Never push through uncertainty

Low confidence or high impact routes the call to a person, and the restraint is recorded too.

04 · Authority

It acts only with the authority you grant

Authority is set per segment of your operation, in one of four modes. You set the ceiling. The record has to justify every step up, and one hard-rule breach drops a segment back. How a segment climbs that ladder is its own page.

Manual Shadow Review Autonomous
How autonomy is earned
05 · Your data

Your data, plainly

The record is valuable because of your operation. That does not make your operation ours.

Scoped to you

Decision records belong to your workspace, and access follows the roles you set. Covered by the same SOC 2 Type II and ISO 27001 controls as the rest of the platform.

Exportable

Any record, any time, as CSV. The ledger is yours to read, keep, and take with you.

06 · Security

Built to the standards your auditors use

Burq is audited against SOC 2 Type II and certified to ISO 27001.

Encryption

Data is encrypted in transit and at rest.

Access

Role-based access inside your workspace. At Burq, production access is limited to authorized staff and logged.

Testing

Independent penetration testing on a recurring schedule, alongside the annual SOC 2 and ISO audits.

Reports

The SOC 2 Type II report and ISO 27001 certificate are available to customers and prospects under NDA.

Reporting an issue

Security questions and vulnerability reports go to support@burqup.com. We acknowledge every report.

See how Burq decides

Book a demo and follow one order from the first option to the final grade.