TrustHub · Procurement
The checklist
before the signature.
A procurement review should be able to establish what Saar is, what it handles, what is supported, what evidence exists and what is not claimed. This page is the index.
01Scope the workloadDescribe the data, deployment boundary, current baseline and success criteria
02Agree handlingConfirm data handling, confidentiality, access and the evidence package before data moves
03Review the evidenceUse the public evidence index and request the internal package where needed
04Decide commerciallyIf the evidence supports it, scope the commercial and deployment terms in writing
Pack contents
What is available, scoped or not claimed.
Request-only items are not published as blanket downloads. They are provided under the appropriate confidentiality and data-handling terms.
| Item | Status | What it covers |
|---|---|---|
| Company and product identity | Available | HEOSSI (PTE.) LTD., Singapore UEN 202532790K. Saar is a byte-exact lossless compression engine and hosted workspace. |
| Data Processing Agreement | On request | Processor terms, safeguards, breach notice and deletion commitments are provided for review and signed before an evaluation or deployment. |
| Security terms and disclosure | Available | The security.txt route, vulnerability disclosure policy and monitored security mailbox are published. Deeper review material is scoped in writing. |
| Sub-processors and locations | Published | The current sub-processor categories and data locations are published in the legal library, with notice and objection terms for customers under a DPA. |
| Supported platforms and limits | Published | macOS and Linux are the current native evaluation targets. Windows is qualified per evaluation. Object and stream limits are published in the platform documentation. |
| Evidence and open review status | Published | Benchmark evidence, bundle gate status, Windows validation and the open external review gates are listed in the evidence index. |
| Commercial licensing | Scoped | Hosted plans, production SDK, OEM and government licensing are separate. Terms are quoted or agreed in writing. |
| Certifications and SLA | Not claimed | No SOC 2, ISO certification, uptime guarantee or SLA is claimed unless it appears in signed terms. |
Boundary
A procurement pack is not a certification, an independent review or a service-level guarantee. Those are separate artifacts and are only claimed when they exist.