Compliance

Attestation receipts, explicit consent, and honest positioning — not compliance theater.

Connection receipts

Tunnel engage and disengage events include signed receipts designed for audit trails — not trust theater.

Explicit consent

Devices are provisioned only when you add them. We do not log destination URLs through the VPN.

Operational transparency

API usage, bandwidth, and billing status are visible in your dashboard.

What we do not claim

Palomino is not a certified compliance product (SOC 2, HIPAA BAA, etc.). We provide cryptographic receipts and clear data practices.